Derek Murphy
Mon, 01 May 2000 09:41:25 -0700
/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */ -----BEGIN PGP SIGNED MESSAGE----- Jiri Kucik, on Mon, 1 May 2000, wrote: > To: IP Masq List <[EMAIL PROTECTED]> > From: Jiri Kucik <[EMAIL PROTECTED]> > Subject: [Masq] IP Masq to virtual interfaces > Date: Mon, 1 May 2000 17:59:13 +0200 (CEST) > > > If you mean masquerading internal users out different interfaces on the same > > box, the answer is yes. Just remember that ipchains DOESN'T do the routing, so > > you have to have the routes set up properly before running the script. > > What about masquerading internal users out different _virtual_ interfaces > (IP aliases) on the same external interface? A virtual or a physical i/f doesn't make any difference. What counts is the ROUTING, and of course, the ipchains rules to allow/deny/reject from/to the different addresses/networks... Well, actually there _is_ a difference - virtual interfaces have a nasty tendency to generate collisions, but I have 9 addresses on the internal card and performance isn't a problem. - -- -----BEGIN PGP SIGNATURE----- Version: 2.6.3ia Charset: noconv Comment: Processed by mkpgp, a Pine/PGP interface on Linux-2.2.x. iQC1AwUBOQ20C+0qVrnIA6PFAQER8wUApy+sgpodwUfGY5EPvALIqX44da+K+D9u Vd/62gBbpFUXC0ay1Ch2xYLe0PtpN3Qq7pWI90oL1ThJVEXTb7hVrqQhIRM9O5hx L/DZlPOFnQDFwaNFjgmX1zxk8nWzZHNWh55eULWbMClvLjUp/H6bULz237DS6Jxe TGTv22tI3L4Hvtc7HOTvGx06otKUABuyEp1/fKipR1VJKbBDGZCJsQ== =q051 -----END PGP SIGNATURE----- Systems Administrator Central Information Services R.E. Gilmore Investments 130 Herzberg Rd Kanata Ontario Canada K2K 3B7 (613)592-2944 x3329 "People should *THINK*; computers should _WORK_" (613)271-3287 (direct) PGP public key http://ludwig.doculink.com/derekm.asc (613)271-1618 (fax) _______________________________________________ Masq maillist - [EMAIL PROTECTED] Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES UNSUBSCRIBING! or email to [EMAIL PROTECTED] PLEASE read the HOWTO and search the archives before posting. You can start your search at http://www.indyramp.com/masq/ Please keep general linux/unix/pc/internet questions off the list.