Re: physical vs. logical network interfaces
- From: Pascal Hambourg <boite-a-spam@xxxxxxxxxxxxxxx>
- Date: Sat, 09 Feb 2008 18:14:45 +0100
stf a écrit :
On tcpdump level they are on "eth1", while on iptables level it is already "eth0".
Oops I skipped this part, replying now.
Both tcpdump and netfilter/iptables see the packets coming from the interface they actually come from, i.e. eth1.
The iptables ruleset may contain rules filtering source|destination addresses that don't match the outgoing|incoming interface, such as :
iptables -A INPUT -i eth1 -d ! $eth1_addr -j DROP
iptables -A OUTPUT -o eth1 -s ! $eth1_addr -j DROP
.
- References:
- physical vs. logical network interfaces
- From: stf
- physical vs. logical network interfaces
- Prev by Date: Re: physical vs. logical network interfaces
- Next by Date: multiple classes with target CLASSIFY
- Previous by thread: Re: physical vs. logical network interfaces
- Next by thread: multiple classes with target CLASSIFY
- Index(es):
Relevant Pages
|