Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 10 May 2002 10:06:26 -0700
From:      rick norman <rick.norman@lmco.com>
To:        Peter Coates <peter@newnet.co.uk>
Cc:        freebsd-ipfw@FreeBSD.ORG
Subject:   Re: [Fwd: ipfw and aliases]
Message-ID:  <3CDBFE12.6093A35B@lmco.com>
References:  <3CDBF514.EBADB9E2@lmco.com> <3CDBF8BB.3DF5F820@newnet.co.uk>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
I'll give that a try, thanks.

Peter Coates wrote:

> Hi,
>
> A solution that should work would be to set the IP's up on seperate VLANs.
> Then they would appear as different interfaces instead of IP's "glued" on
> to one interface. I would suggest 4.5 for VLANs too.
>
> Regards,
> Peter
>
> rick norman wrote:
> >
> >   ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
> >
> > Subject: Re: ipfw and aliases
> > Date: Fri, 10 May 2002 09:27:05 -0700
> > From: rick norman <rick.norman@lmco.com>
> > To: Robert bobb Crosbie <bobb+freebsd-ipfw@redbrick.dcu.ie>
> > References: <3CDB2CED.DCC3092F@lmco.com>
> >      <20020510111532.A33197@flipflop.tchpc.tcd.ie>
> >
> > I tried that but via with an ip addr catches all the aliases going out the
> > interface, not just the requested one.
> > Any other ideas ?
> > Rick
> >
> > Robert bobb Crosbie wrote:
> >
> > > rick norman hath declared on Thursday the 09 day of May 2002  :-:
> > > > Is it possible to write a firewall rule for a router with one interface
> > > > with multiple aliased ip
> > > > addresses that will grab pkts based on the IP_alias they are routed in
> > > > or out on, rather than the src or des address of the pkt.  It looks as
> > > > tho the 'via' qualifier lumps all the aliases for an interface
> > > > together.   I would like to grab pkts, not based on the src and des
> > > > contained in the packet, but rather based on which IP_alias it is going
> > > > to be sent out on.
> > >
> > > You can use via with an IP address or interface.
> > >
> > > - bobb


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?3CDBFE12.6093A35B>