Re: iptables and virtual net interfaces?

From: Steve Wampler (sbw@tapestry.tucson.az.us)
Date: 01/16/02 

From: "Steve Wampler" <sbw@tapestry.tucson.az.us>
To: focus-linux@securityfocus.com
Date: 16 Jan 2002 07:01:38 MST

I asked about using interface aliases such as ethX:Y
with iptables.

Here's what I've learned:

(1) Yes you can
(2) No you can't
(3) Maybe you can
(4) You can, but you don't want to
(5) You can't, but you wouldn't want to anyway
(6) Doesn't matter because you don't really want to
(6) I don't know, but tell me what you learn
(7) Try it yourself
(8) Works with ipchains

My experience with the version of iptables I have matches
(2) and (5) [syntax error in rules trying to use ethX:Y].

I *did* learn a lot from the responses, incidently, so I do
thank all of you!

-Steve 

-- 
Steve Wampler (sbw@tapestry.tucson.az.us)

Relevant Pages