On Monday 03 June 2002 5:11 pm, Craig Smith wrote:

> I am trying to replace a Checkpoint firewall running on Nokia hardware.
> Under the config for the Nokia box I can tell the box to arp for address
> other than its own. How do I do this under Linux in a way that will
> IPtables can be used to translate the address to its ultimate destination
> behind the firewall? What would a IPtable rule look like? Thanks.

ifconfig eth0:1 <IP address> netmask <netmask>

will add an extra IP address to eth0, so it will correctly answer arp 
requests for that address

iptables rules, nothing different than you would have done anyway, except you 
always refer to the interface as "eth0" no matter which address you're 
talking about.   You can put as many addresses on one interface as you like.

 

Antony.

Reply via email to