Re: Aliased Masqed Firewalled IP forwards

From: Andre Pang (andrep-ml@vjolnir.org)
Date: Tue Mar 21 2000 - 19:44:55 EST


On Tue, Mar 21, 2000 at 08:11:38PM +0100, Jeroen Massar wrote:

> What doesn't:
> - Outgoing connections for that specific IP over the specific alias.
>
> Question:
> How do I do it, and even better CAN it be done?
> The system currently runs a 2.2.13 kernel but another 2.2.x shouldn't
> be a problem... 2.3 is too unstable at the moment though...

    from http://members.home.net/ipmasq/ipmasq-HOWTO-1.82-7.html#ss7.24 :-

Users should also understand that IP Masquerading will only work out a
physical interface such as eth0, eth1, etc. MASQing out an aliased interface
such as "eth0:1, eth1:1, etc" will NOT work. In other words, the following
WILL NOT WORK:

      /sbin/ipfwadm -F -a m -W eth0:1 -S 192.168.0.0/24 -D 0.0.0.0/0
      /sbin/ipchains -A forward -i eth0:1 -s 192.168.0.0/24 -j MASQ"

    what you're looking for is something called 'static NAT'. netfilter
(ie: the 2.3/2.4 kernels) support this, IIRC. unfortunately i don't think
there's a solution for 2.2.x, unless somebody else interjects here..

-- 
: Andre Pang <andrep@vjolnir.org> - Purruna Pty Ltd - ph# 0411.882299 :
:    #ozone - http://www.vjolnir.org/ozone/ | trust in love to save   :

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Thu Mar 23 2000 - 21:00:35 EST