Re: An Interface with alias

[Andrew Beverley <andy@xxxxxxxxxxx>]

On Fri, 2012-01-20 at 15:46 -0200, Usuário do Sistema wrote:
> so... I wonder if is very bad or what can happen when I do alias on a
> interface for more the one network. for exemplo:
...
> I wish drop any packages between theses network. any traffic between
> the network 172.16.30.0/30 and 172.16.30.4/30 must dropped by
> iptables.

That sounds a bit messy, and I don't even know if it's possible. Why not
just use multiple physical network interfaces?

Even if you got it working, if the computers on the 2 separate networks
had their netmask incorrectly configured, then you'd get traffic passing
directly between them without even going to the Linux box.

Andy


--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html