-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello Jack,

Thanks.


JBB

Thursday, September 13, 2001, 4:48:53 PM, you wrote:

JB> On Thu, 13 Sep 2001 14:33:28 -0400
JB> "Jonathan B. Bayer" <[EMAIL PROTECTED]> wrote:

>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Hello ,
>>
>> I'm trying to set up a firewall for my office using iptables.  The system is a 
>RedHat 7.1
>> installation with all the latest updates.
>>
>> Once of the things we have here is that the external NIC (eth0) supports 4 IP 
>addresses.
>> The internal network is a 192.168.1. subnet.
>>
>> I'm trying to get this system to route packets going to one of the virtual IPs to 
>one of
>> internal system.  But I can't figure out how.  When I try the command, iptables 
>rejects
>> the virtual interface (see the output below).
>>
>> Any help would be appreciated.


JB> Hey, JBB. First of all, go here to see a set of nicely documented iptables 
firewall rules:

JB> http://email.riverdale.k12.or.us/mailarchives/k12linux/1605.html

JB> Note how he has defined his eth interfaces in the "Define additional inside 
devices" section. I suggest
JB> just defining your eth0:0, etc. aliases as LAN_DEV_2="eth0:0" etc., then issuing 
calls to LANDEV_2 rather than eth0:0. It could be a limitation of how iptables parses 
the rules. Note that the
JB> recently released iptables 1.2.3 contacined a fix so that iptables-save/restore 
could properly handle an eth+
JB> declaration.

JB> jb



JB> _______________________________________________
JB> Seawolf-list mailing list
JB> [EMAIL PROTECTED]
JB> https://listman.redhat.com/mailman/listinfo/seawolf-list



- --
Best regards,
 Jonathan                            mailto:[EMAIL PROTECTED]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (MingW32)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAjuhPN0ACgkQxQhxe/20cF4mNgCcD6W0fRymkC2xpagTzLXJXPpf
gdgAn0njymHVDlcmvOFmEgpD7Rw8vKF9
=1/Nk
-----END PGP SIGNATURE-----



_______________________________________________
Seawolf-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/seawolf-list

Reply via email to