-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hello Jack,
Thanks.
JBB
Thursday, September 13, 2001, 4:48:53 PM, you wrote:
JB> On Thu, 13 Sep 2001 14:33:28 -0400
JB> "Jonathan B. Bayer" <[EMAIL PROTECTED]> wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Hello ,
>>
>> I'm trying to set up a firewall for my office using iptables. The system is a
>RedHat 7.1
>> installation with all the latest updates.
>>
>> Once of the things we have here is that the external NIC (eth0) supports 4 IP
>addresses.
>> The internal network is a 192.168.1. subnet.
>>
>> I'm trying to get this system to route packets going to one of the virtual IPs to
>one of
>> internal system. But I can't figure out how. When I try the command, iptables
>rejects
>> the virtual interface (see the output below).
>>
>> Any help would be appreciated.
JB> Hey, JBB. First of all, go here to see a set of nicely documented iptables
firewall rules:
JB> http://email.riverdale.k12.or.us/mailarchives/k12linux/1605.html
JB> Note how he has defined his eth interfaces in the "Define additional inside
devices" section. I suggest
JB> just defining your eth0:0, etc. aliases as LAN_DEV_2="eth0:0" etc., then issuing
calls to LANDEV_2 rather than eth0:0. It could be a limitation of how iptables parses
the rules. Note that the
JB> recently released iptables 1.2.3 contacined a fix so that iptables-save/restore
could properly handle an eth+
JB> declaration.
JB> jb
JB> _______________________________________________
JB> Seawolf-list mailing list
JB> [EMAIL PROTECTED]
JB> https://listman.redhat.com/mailman/listinfo/seawolf-list
- --
Best regards,
Jonathan mailto:[EMAIL PROTECTED]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (MingW32)
Comment: For info see http://www.gnupg.org
iEYEARECAAYFAjuhPN0ACgkQxQhxe/20cF4mNgCcD6W0fRymkC2xpagTzLXJXPpf
gdgAn0njymHVDlcmvOFmEgpD7Rw8vKF9
=1/Nk
-----END PGP SIGNATURE-----
_______________________________________________
Seawolf-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/seawolf-list