I've partially answered my own questions but I have new ones. After reading up on the topic I discovered that IP aliasing has been deprecated together with ifconfig, and the preferred way for controlling interfaces and routes is using iproute/iproute2. Apologies to those who think this is newbie stuff--I feel I'm still living in the ipfwadm and ipchains era. Iproute allows multiple addresses on one device without using the old eth0:n (aliasing) way of assigning things. Unfortunately it seems that /etc/network/interfaces does not allow multiple addresses without using aliasing. Does anyone know how to assign multiple IP addresses on Debian/Ubuntu using /etc/network/interfaces without aliasing?
Thanks. Carlo ---------------------------------------------- Carlo Sogono [EMAIL PROTECTED] ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Carlo Sogono Sent: Thursday, 23 June 2005 10:33 AM To: slug@slug.org.au Subject: [SLUG] IP Aliasing I've read from a long time ago (during the time of Linux 2.2.x) that the practice of IP aliasing is not recommended for commercial use. Our network has a Linux box hosting 2 public IPs and does various routing tasks. It has 4 network cards already, connecting different subnets of the office and another Linux router where our hosted client servers are. I have configured this new firewall from scratch to replace the old dodgy FC1 firewall of an ex-employee. Are there any gotchas to using IP aliasing (eth0, eth0:0, eth0:1, ...) in a commercial environment? What is everyone else doing? Our 2 IPs are used to host various smtp, http and https services. It should be possible to run different http/https services on different ports and have linux forward them but the management doesn't want their clients to be typing port numbers in URLs. Carlo ---------------------------------------------- Carlo Sogono [EMAIL PROTECTED] ________________________________________________________________________ This email has been scanned for all viruses by the MessageLabs SkyScan service. For more information on a proactive anti-virus service working around the clock, around the globe, visit http://www.hi-speed.net.au ________________________________________________________________________ _____________________________________________________________________ This message has been checked for all known viruses by the MessageLabs Virus Scanning Service. For further information visit http://www.Hi-Speed.net.au ________________________________________________________________________ ________________________________________________________________________ This email has been scanned for all viruses by the MessageLabs SkyScan service. For more information on a proactive anti-virus service working around the clock, around the globe, visit http://www.hi-speed.net.au ________________________________________________________________________ -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html