[TriLUG] iptables with more than 2 nics

Lee elfick at trilug.org
Mon May 3 10:23:22 EDT 2004


Ryan Leathers wrote:

>Im interested in setting up iptables on a host with several nics.  I
>thought this would be a snap but its got me stumped.  Now I must admit
>that I have a lot more experience with hardware firewalls (Cisco PIX)
>than with IPTABLES, and part of my problem may be that Im trying to see
>IPTABLES conform in some way to my tainted expectations.
>
>In short, I want to assign rules on a per interface basis.  I want to
>masq between eth0 and eth1 as well as between eth0 and eth2.  I want
>eth1 to permit certain traffic and eth2 to permit a different set of
>traffic.  Simply plugging in "-i eth1" isn't getting me where I thought
>it would.
>  
>
Would PF on OpenBSD be an option? I'm not that familiar with iptables, 
but I know what you want to do is fairly easy to do with PF.



More information about the TriLUG mailing list