Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 10 May 2002 17:43:39 +0100
From:      Peter Coates <peter@newnet.co.uk>
To:        rick norman <rick.norman@lmco.com>
Cc:        freebsd-ipfw@FreeBSD.ORG
Subject:   Re: [Fwd: ipfw and aliases]
Message-ID:  <3CDBF8BB.3DF5F820@newnet.co.uk>
References:  <3CDBF514.EBADB9E2@lmco.com>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
Hi,

A solution that should work would be to set the IP's up on seperate VLANs.
Then they would appear as different interfaces instead of IP's "glued" on
to one interface. I would suggest 4.5 for VLANs too.

Regards,
Peter




rick norman wrote:
> 
>   ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
> 
> Subject: Re: ipfw and aliases
> Date: Fri, 10 May 2002 09:27:05 -0700
> From: rick norman <rick.norman@lmco.com>
> To: Robert bobb Crosbie <bobb+freebsd-ipfw@redbrick.dcu.ie>
> References: <3CDB2CED.DCC3092F@lmco.com>
>      <20020510111532.A33197@flipflop.tchpc.tcd.ie>
> 
> I tried that but via with an ip addr catches all the aliases going out the
> interface, not just the requested one.
> Any other ideas ?
> Rick
> 
> Robert bobb Crosbie wrote:
> 
> > rick norman hath declared on Thursday the 09 day of May 2002  :-:
> > > Is it possible to write a firewall rule for a router with one interface
> > > with multiple aliased ip
> > > addresses that will grab pkts based on the IP_alias they are routed in
> > > or out on, rather than the src or des address of the pkt.  It looks as
> > > tho the 'via' qualifier lumps all the aliases for an interface
> > > together.   I would like to grab pkts, not based on the src and des
> > > contained in the packet, but rather based on which IP_alias it is going
> > > to be sent out on.
> >
> > You can use via with an IP address or interface.
> >
> > - bobb

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?3CDBF8BB.3DF5F820>