Hi,

You can't bridge ip aliases, as they aren't really interfaces.  What you
_can_ do (warning: untested mumbling ahead) is just bridge eth0 and eth1
together, assign the 192.168.8.1 as an extra address to br0 (note that IP
alias devices are deprecated, instead use something like
"ip addr add 192.168.8.1/24 brd + dev br0"), and with appropriate firewall
rules make sure that no 192.168.8.0/24 packet is ever bridged to eth0.  This
is 'logically' how things already are right now.  For this you need the
bridge-nf patch, and having ebtables for filtering on other protocols
would be useful too, I guess.


cheers,
Lennert


On Sun, Dec 02, 2001 at 05:34:57PM -0600, Brad Holcomb wrote:

> I'm running a box with two network cards and currently use proxy_arp and 
> ipchains between the two. Is there a way I can use the bridge module and 
> brctl to only bind to specific eth0 and eth1 and still have eth1:1 masq to 
> eth0 ? or do i need to masq the other ip to the br0 dev?
> 
> here's my ifconfig
> 
> eth0 - 64.113.85.236  (main ip)
>               broadcast 64.113.85.255 netmask 255.255.255.128
> eth1 - 64.113.85.169 (gateway for proxy_arp)
>               broadcast 64.113.85.175 netmask 255.255.255.248
> eth1:1 - 192.168.8.1 (used for gw for masq)
>               broadcast 192.168.8.0 netmask 255.255.255.0
> eth1:2 - 64.113.85.173 (ip used for ftp)
>               broadcast 64.113.85.255 netmask 255.255.255.128
>       or      broadcast 64.113.85.175 netmask 255.255.255.248
> 
> any way i can plug a machine into the hub on eth1 and bridge it while 
> another machine on the same up uses the masq alias?? what i'm trying to do 
> is get rid of proxy_arp (using the .168 gw) and use bridgeing in place 
> while still being able to locally run daemons on aliases eth dev's
> 
> thanks,
> brad
> 
> 
_______________________________________________
Bridge mailing list
[EMAIL PROTECTED]
http://www.math.leidenuniv.nl/mailman/listinfo/bridge

Reply via email to