Thomas,
In that case I don't think you can do it with just pfilter. You will
need to add a special rule to iptables to accept incoming connections on
the alias port, i.e. something like:
iptables -A INPUT -d <ALIASIP> -j ACCEPT
before the jump to pfilter (note, you might want to protect it a bit
more than this), and then bring up your alias interface.
If you want more details, let me know.
Frank
On Mon, 2003-11-03 at 14:10, thomas ford wrote:
> Hello, Frank
>
> Thank you for your solution, but it sounds like I have to use real ip.
> Becuase of my special purpose, so I have to use alias ip alone,
> without directing to real ip.
>
> Pfilter that Oscar has set only accept real ip ping. Can you give me
> further suggestion
> about setting pfilter so that other computer can ping to its alias ip
> without directing to its real ip?
>
> Thanks again.
>
> Yours
> Thomas
> Frank Crawford <[EMAIL PROTECTED]> wrote:
> Thomas,
> Strange, I also hunted down this issue just last week. The
> answer is
> that yes, it appears you can, by adding the command:
>
> alias
>
> It actually sets up DNAT pointing to the address you specify,
> and also
> sets up the same for outgoing traffic! This is better than a
> normal
> alias IP.
>
> However, it does seem to have one problem (which I am yet to
> submit) in
> that it doesn't set the correct netmask and broadcast address
> on the
> alias and so messes up routing. The fix for specific cases is
> easy (and
> involves putting hardcoding the netmask, etc, in
> pfilter.default.rulesets), and I can see the general fix, but
> haven't
> had a chance to do it.
>
> Frank
>
> On Sun, 2003-11-02 at 12:50, thomas ford wrote:
> > Can I change pfilter.conf so that the alias ip of the
> > server can accept ping from outside.
> &g! t;
> > Right now outside users can only access the ip of NIC
> > itself based on the pfilter.conf oscar set, they can't
> > access the alias ip of that NIC.
> >
> > How can I set pfilter.conf to achieve that? I cannot
> > find any document to do that.
> >
> > ~
> > Thomas
> >
> > __________________________________
> > Do you Yahoo!?
> > Exclusive Video Premiere - Britney Spears
> > http://launch.yahoo.com/promos/britneyspears/
> >
> >
> > -------------------------------------------------------
> > This SF.net email is sponsored by: SF.net Giveback Program.
> > Does SourceForge.net help you be more productive? Does it
> > help you create better code? SHARE THE LOVE, and help us
> help
> > YOU! Click Here: http://sourceforge.net/donate/
> > _______________________________________________
> > Oscar-users mailing list
> > [EMAIL PROTECTED]
> > https://lists.sourceforge.net/lists/listinfo/oscar-users
> --
> ac3
> Suite G16, Bay 7, Locomotive Workshop Phone: 02 9209 4600
> Australian Technology Park Fax: 02 9209 4611
> Eveleigh NSW 1430
>
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: SF.net Giveback Program.
> Does SourceForge.net help you be more productive? Does it
> help you create better code? SHARE THE LOVE, and help us help
> YOU! Click Here: http://sourceforge.net/donate/
> _______________________________________________
> Oscar-users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/oscar-users
>
> ______________________________________________________________________
> Do you Yahoo!?
> Exclusive Video Premiere - Britney Spears
--
ac3
Suite G16, Bay 7, Locomotive Workshop Phone: 02 9209 4600
Australian Technology Park Fax: 02 9209 4611
Eveleigh NSW 1430
-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! Click Here: http://sourceforge.net/donate/
_______________________________________________
Oscar-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/oscar-users
