Date: Sat, 13 Feb 1999 22:02:23 +0930 From: "Andrew Hodges" <ahodges@ozemail.com.au> To: <security@FreeBSD.ORG>, <stable@FreeBSD.ORG> Subject: Using Interface Aliases on FreeBSD with ipfw Message-ID: <001d01be574c$e992de00$0403000a@scooby.vk8ah.org>
next in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format. ------=_NextPart_000_001A_01BE579C.891DD160 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi, for purely availability reasons I am using on old DECpc 433W as a = filtering Firewall with ipfw on 2.2.8. This sytem has only one ethernet interface and I have been using = in with ppp through the serial port. I am putting ISDN in place and the TA I have has an = ethernet interface.=20 I am wondering if it would be feasible to use the same interface le0 = with 2 ip addresses on different subnets using something like:=20 ifconfig_le0_alias0=3D"inet 139.100.1.1 netmask 255.255.255.0" ifconfig_le0_alias1=3D"inet 192.168.2.1 netmask 255.255.255.0" and use rc.firewall with the same interface and natd. Is this possible? Are there any issues? Thanks Andrew ahodges@ozemail.com.au ------=_NextPart_000_001A_01BE579C.891DD160 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD W3 HTML//EN"> <HTML> <HEAD> <META content=3Dtext/html;charset=3Diso-8859-1 = http-equiv=3DContent-Type> <META content=3D'"MSHTML 4.72.3612.1700"' name=3DGENERATOR> </HEAD> <BODY bgColor=3D#ffffff> <DIV><FONT color=3D#000000 size=3D2>Hi,</FONT></DIV> <DIV><FONT color=3D#000000 size=3D2></FONT> </DIV> <DIV><FONT color=3D#000000 size=3D2>for purely availability reasons I am = using on=20 old DECpc 433W as a filtering Firewall with ipfw on</FONT></DIV> <DIV><FONT size=3D2>2.2.8. This sytem has only one ethernet interface = and I have=20 been using in with ppp through the</FONT></DIV> <DIV><FONT size=3D2>serial port. I am putting ISDN in place and the TA I = have has=20 an ethernet interface. </FONT></DIV> <DIV><FONT size=3D2></FONT> </DIV> <DIV><FONT size=3D2>I am wondering if it would be feasible to use the = same=20 interface le0 with 2 ip addresses on different</FONT></DIV> <DIV><FONT size=3D2>subnets using something like: </FONT></DIV> <DIV><FONT size=3D2></FONT> </DIV> <DIV><FONT size=3D2> ifconfig_le0_alias0=3D"inet 139.100.1.1 = netmask=20 255.255.255.0"<BR> ifconfig_le0_alias1=3D"inet = 192.168.2.1 netmask=20 255.255.255.0"</FONT></DIV> <DIV><FONT size=3D2></FONT> </DIV> <DIV><FONT size=3D2>and use rc.firewall with the same interface and=20 natd.</FONT></DIV> <DIV><FONT size=3D2></FONT> </DIV> <DIV><FONT size=3D2>Is this possible? Are there any issues?</FONT></DIV> <DIV><FONT size=3D2></FONT> </DIV> <DIV><FONT size=3D2>Thanks</FONT></DIV> <DIV><FONT size=3D2>Andrew</FONT></DIV> <DIV><FONT size=3D2></FONT> </DIV> <DIV><FONT size=3D2><A=20 href=3D"mailto:ahodges@ozemail.com.au">ahodges@ozemail.com.au</A></FONT><= /DIV> <DIV><FONT size=3D2></FONT> </DIV> <DIV><FONT size=3D2></FONT> </DIV> <DIV><FONT size=3D2></FONT> </DIV></BODY></HTML> ------=_NextPart_000_001A_01BE579C.891DD160-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?001d01be574c$e992de00$0403000a>