04-21-2010
This can be configured in many ways but before I'd go through the headache of setting up iptables, I'd first try and configure it in the daemons themselves. You'd configure ssh to listen for connections on 192.168.10.x where x is whatever IP your server has, etc, etc.
10 More Discussions You Might Find Interesting
1. Solaris
I m having interface ce0 ce1 and its sub interfaces for that.
I want to give MAC addresses for the same.
How will I assign it.
Please give solution for the same (4 Replies)
Discussion started by: sunray
4 Replies
2. IP Networking
Hi ,
by default the physical interface (eth1) and virtual interface eth1:0 will be having same mac address, is there any way we can assign separate mac addresses for both the interfaces.
would some one help me out in this.
Thanks
Gopi (1 Reply)
Discussion started by: Gopi Krishna P
1 Replies
3. Solaris
We got a network card(e1000g0) with 1gb of speed and working with global zone. We got a new network interface card, we have to place that in slot and we have to use that card as dedicated network interface to the non-global zone(hyd_app) in V890.
As i never done this before, please explain me... (2 Replies)
Discussion started by: Sesha
2 Replies
4. Web Development
Hi,
During Nagios install we added the following piece of config to apache httpd.conf file and it runs on the regular port 80, now if I want to run this on a different port then what needs to changed to make it run on lets say port 8080.
I tried adding Virtual servers but was getting... (1 Reply)
Discussion started by: jacki
1 Replies
5. UNIX for Dummies Questions & Answers
I have 2 physical interfaces (bnx0 and bnx1) aggregated into aggr1. I need to assign second IP, and normally I know how to do it to physical interface (i.e. bnx0:1) however same trick (aggr1:1) is not working. Is there any way to do it? (0 Replies)
Discussion started by: bratan
0 Replies
6. Red Hat
Hi,
How can I config iptables to allow port forwarding from one WAN interface to second lan interface .
In my system I have one wan interface 61.93.204.56 (eth0),and lan interface 10.2.1.52(eth1)
I want to make port forward port no 22 from 61.93.204.56 to
port 22 , 10.2.1.52 , tcp and udp... (1 Reply)
Discussion started by: chuikingman
1 Replies
7. IP Networking
I have been tearing my hair out with this (and not enough left to keep going).
I have a linux box (raspberry pi) single ethernet interface in a heavily filtered DMZ with external ports fwd'd that can access an internal IP's (different subnet).
I want to forward the traffic. Should be simple I... (0 Replies)
Discussion started by: martyuiop
0 Replies
8. IP Networking
Hello all,
I am trying to receive (tcp/udp/sctp) traffic from all IPs and, eventually, all ports of an IPv6 address block using as few sockets as possible short of implementing my own network stack.
One possible solution was to associate an IP block to an interface then bind to that... (6 Replies)
Discussion started by: redwil
6 Replies
9. IP Networking
Hello,
I wanted to setup routing certain traffic (http/s) out via a second (faster) interface, like described in the following docs (may not post urls):
linux-ip.net /html/adv-multi-internet.html
thegeekstuff.com /2014/08/add-route-ip-command/
I already had this working years ago on... (0 Replies)
Discussion started by: hyphan
0 Replies
10. Solaris
Hello dears
how to assign IPv4 and IPv6 addresses with same interface on solaris 10 (1 Reply)
Discussion started by: ttashman
1 Replies
LEARN ABOUT OPENSOLARIS
tc-matchall
Match-all classifier in tc(8) Linux Match-all classifier in tc(8)
NAME
matchall - traffic control filter that matches every packet
SYNOPSIS
tc filter ... matchall [ skip_sw | skip_hw ] [ action ACTION_SPEC ] [ classid CLASSID ]
DESCRIPTION
The matchall filter allows to classify every packet that flows on the port and run a action on it.
OPTIONS
action ACTION_SPEC
Apply an action from the generic actions framework on matching packets.
classid CLASSID
Push matching packets into the class identified by CLASSID.
skip_sw
Do not process filter by software. If hardware has no offload support for this filter, or TC offload is not enabled for the inter-
face, operation will fail.
skip_hw
Do not process filter by hardware.
EXAMPLES
To create ingress mirroring from port eth1 to port eth2:
tc qdisc add dev eth1 handle ffff: ingress
tc filter add dev eth1 parent ffff:
matchall skip_sw
action mirred egress mirror
dev eth2
The first command creats an ingress qdisc with handle ffff: on device eth1 where the second command attaches a matchall filters on it that
mirrors the packets to device eth2.
To create egress mirroring from port eth1 to port eth2:
tc qdisc add dev eth1 handle 1: root prio
tc filter add dev eth1 parent 1:
matchall skip_sw
action mirred egress mirror
dev eth2
The first command creats an egress qdisc with handle 1: that replaces the root qdisc on device eth1 where the second command attaches a
matchall filters on it that mirrors the packets to device eth2.
To sample one of every 100 packets flowing into interface eth0 to psample group 12:
tc qdisc add dev eth0 handle ffff: ingress
tc filter add dev eth0 parent ffff: matchall
action sample rate 100 group 12
SEE ALSO
tc(8),
iproute2 21 Oct 2015 Match-all classifier in tc(8)