I must be missing something. If you have lines like this in the /etc/pfilter.conf file:
alias <ALIAS_IP> <REAL_IP> open ping to <ALIAS_IP> then anyone should be able to ping the <ALIAS_IP> address from the outside. Is this what you want? On Sun, 2003-11-02 at 21:32, Frank Crawford wrote: > Thomas, > In that case I don't think you can do it with just pfilter. You will > need to add a special rule to iptables to accept incoming connections on > the alias port, i.e. something like: > > iptables -A INPUT -d <ALIASIP> -j ACCEPT > > before the jump to pfilter (note, you might want to protect it a bit > more than this), and then bring up your alias interface. > > If you want more details, let me know. > > Frank > > On Mon, 2003-11-03 at 14:10, thomas ford wrote: > > Hello, Frank > > > > Thank you for your solution, but it sounds like I have to use real ip. > > Becuase of my special purpose, so I have to use alias ip alone, > > without directing to real ip. > > > > Pfilter that Oscar has set only accept real ip ping. Can you give me > > further suggestion > > about setting pfilter so that other computer can ping to its alias ip > > without directing to its real ip? > > > > Thanks again. > > > > Yours > > Thomas > > Frank Crawford <[EMAIL PROTECTED]> wrote: > > Thomas, > > Strange, I also hunted down this issue just last week. The > > answer is > > that yes, it appears you can, by adding the command: > > > > alias > > > > It actually sets up DNAT pointing to the address you specify, > > and also > > sets up the same for outgoing traffic! This is better than a > > normal > > alias IP. > > > > However, it does seem to have one problem (which I am yet to > > submit) in > > that it doesn't set the correct netmask and broadcast address > > on the > > alias and so messes up routing. The fix for specific cases is > > easy (and > > involves putting hardcoding the netmask, etc, in > > pfilter.default.rulesets), and I can see the general fix, but > > haven't > > had a chance to do it. > > > > Frank > > > > On Sun, 2003-11-02 at 12:50, thomas ford wrote: > > > Can I change pfilter.conf so that the alias ip of the > > > server can accept ping from outside. > > &g! t; > > > Right now outside users can only access the ip of NIC > > > itself based on the pfilter.conf oscar set, they can't > > > access the alias ip of that NIC. > > > > > > How can I set pfilter.conf to achieve that? I cannot > > > find any document to do that. > > > > > > ~ > > > Thomas > > > > > > __________________________________ > > > Do you Yahoo!? > > > Exclusive Video Premiere - Britney Spears > > > http://launch.yahoo.com/promos/britneyspears/ > > > > > > > > > ------------------------------------------------------- > > > This SF.net email is sponsored by: SF.net Giveback Program. > > > Does SourceForge.net help you be more productive? Does it > > > help you create better code? SHARE THE LOVE, and help us > > help > > > YOU! Click Here: http://sourceforge.net/donate/ > > > _______________________________________________ > > > Oscar-users mailing list > > > [EMAIL PROTECTED] > > > https://lists.sourceforge.net/lists/listinfo/oscar-users > > -- > > ac3 > > Suite G16, Bay 7, Locomotive Workshop Phone: 02 9209 4600 > > Australian Technology Park Fax: 02 9209 4611 > > Eveleigh NSW 1430 > > > > > > > > > > ------------------------------------------------------- > > This SF.net email is sponsored by: SF.net Giveback Program. > > Does SourceForge.net help you be more productive? Does it > > help you create better code? SHARE THE LOVE, and help us help > > YOU! Click Here: http://sourceforge.net/donate/ > > _______________________________________________ > > Oscar-users mailing list > > [EMAIL PROTECTED] > > https://lists.sourceforge.net/lists/listinfo/oscar-users > > > > ______________________________________________________________________ > > Do you Yahoo!? > > Exclusive Video Premiere - Britney Spears -- Neil Gorsuch NCSA [EMAIL PROTECTED] 217-244-0424 ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Oscar-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/oscar-users
