ribitch

I am working on an IP tables firewall and I need to pass ports 80, 81, and 443 through. The interface it is coming into is aliased with a second IP.

eth0=192.168.1.1
eth0:1=192.168.1.2

eth1=192.168.10.1

eth0 is the firewalls public interface, eth0:1 is the servers public IP which must be different than the firewalls, and eth1 is the firewalls private network (actually a DMZ with a second firewall attached to it).

I need to route all requests to www.mydomain.com through the firewall to the server in teh DMZ. I am trying to avoid adding another NIC for that alaised IP because I will be adding one for a 802.11 network and I dont want to eat up all of the PCI slots.

Does anyone know if iptables works with aliased IP's? I am starting to think that.

Thanks

__________________
http://ribitch.com/ipod.html

ribitch

i did it.

IP tables doesnt support aliased interfaces. The alias appears as the main interface from what I gathered. so I had to forward all traffic on the main interface in, then nat it to the server. I was hoping to get by without making a new internal DNS entry for that server, but I have to.