[ILUG] Enabling server to access single IP address out of net mask range

[Paul Jakma]

On Thu, 8 Jun 2000, Cormac Hogan wrote:

> Possibly Gary,
> 
> What I meant is that I don't think it is possible to access the print server 
> at 192.168.205.254 and the hosts in the range 192.168.205.60 - 
> 192.168.205.70 only, which is what I think Tony is trying to achieve.
> 

in that case, why not go with the eth:0 on 192.168.205/16, and use
ipchains to restrict access to/from 192.168.205/16, eg:

ipchains -I 1 out -s 0/0 -d printer/32 -j ACCEPT
ipchains -I 1 out -s 0/0 -d whatever/32 -j ACCEPT
..etc.. for whatever hosts on the 205 net.

ipchains -A out -s 0/0 -d 192.168.205/16 -j DENY

and do the same for input:
ipchains -I 1 input -s printer/32 -d 0/0 -j ACCEPT
ipchains -I 1 input -s whatever/32 -d 0/0 -j ACCEPT
..etc..

ipchains -A input -s 192.168.205/16 -d 0/0 -j DENY

> Cormac

> >Let see:
> >In your kernel config, enable IP Aliasing.  Compile and reboot (This is
> >assuming it's not already on)
> >then use "ifconfig eth0:0 192.168.205.2 netmask 255.255.255.0 up"
> >
> >This will give you an interface on the 192.168.205 network.  You will
> >probably have to do something like
> >
> >route add -net 192.168.205.0 netmask 255.255.255.0 eth0:0
> 
> 
> 
> ________________________________________________________________________
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
> 
> 
>