Mailinglist Archive: opensuse-security (485 mails)

< Previous Next >
RE: [suse-security] Adding and additional IP address, does it affect SuSE firewall?
  • From: "Richard Mixon (qwest)" <rnmixon@xxxxxxxxx>
  • Date: Tue, 30 Mar 2004 12:16:20 -0700
  • Message-id: <DKELJBPNDHJEECCAEPGOCEPNFBAA.rnmixon@xxxxxxxxx>
Markus,

Thank you for the reply, however it does not appear to work for me. I issues an SuSEconfig and then did " rcnetwork restart -o
type=eth". The conents of my ifcfg-eth1 (eth0 is not used) and output of ifconfig are below.

BTW: I did not realize that my email client should wrap outgoing text. I had been taught to let the receiving client format it
according to user preferences. If this really causes my posts to be hard to read, then obviously I should change it. Yes, I am using
Outlook, but soon will be on a new Mac with OS X, which is at least a littel better than Windoze:)

Thank you - Richard

bighost:/etc/sysconfig/network # cat ifcfg-eth1
BOOTPROTO='static'
BROADCAST='140.96.50.63'
IPADDR_A='140.96.50.58'
NETMASK_A='255.255.255.248'
IPADDR_B='140.96.50.59'
NETMASK_B='255.255.255.248'
NETWORK='140.96.50.56'
REMOTE_IPADDR=''
STARTMODE='onboot'
UNIQUE='kN0E.naPqmzBs9CA'
WIRELESS='no'
bighost:/etc/sysconfig/network # ifconfig
eth1 Link encap:Ethernet HWaddr 00:E0:81:52:78:01
inet addr:140.96.50.58 Bcast:140.96.50.63 Mask:255.255.255.248
inet6 addr: fe80::2e0:81ff:fe52:7801/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1683 errors:0 dropped:0 overruns:0 frame:0
TX packets:754 errors:0 dropped:0 overruns:0 carrier:0
collisions:1 txqueuelen:100
RX bytes:153050 (149.4 Kb) TX bytes:768902 (750.8 Kb)
Interrupt:25 Memory:fc9f0000-fca00000

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:1572955 errors:0 dropped:0 overruns:0 frame:0
TX packets:1572955 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1697136795 (1618.5 Mb) TX bytes:1697136795 (1618.5 Mb)

bighost:/etc/sysconfig/network #
-----Original Message-----
From: Markus Gaugusch [mailto:markus@xxxxxxxxxxx]
Sent: Tuesday, March 30, 2004 10:13 AM
To: SuSE-Security
Subject: Re: [suse-security] Adding and additional IP address, does it
affect SuSE firewall?


On Mar 30, Richard Mixon (qwest) <rnmixon@xxxxxxxxx> wrote:
> We need to add an additional IP address to provide an additional SSL
> certificate on a different Apache2 virtual host.
>
> 2) Should I use the ip-alias facility for doing this? I found mention on
> one post that since kernel 2.4 this facility has been superceded by
> features in the firewall. Not sure how, nor could I find any hints.
I can only answer your second question. To add more than one IP address to
a SuSE box, edit /etc/sysconfig/network/ifcfg-eth0 and modify it to look
like this:

IPADDR_A='1.2.3.244'
NETMASK_A='255.255.255.224'
IPADDR_B='1.2.3.245'
NETMASK_B='255.255.255.224'

Although I belive,that the NETMASK could probably even be left alone, and
you just have IPADDR_A, IPADDR_B, etc. instead of the original IP_ADDR.

Markus
PS: Richard, your linebreaks are missing. Probably because outlook is just
broken sh*t ...

--
__________________ /"\
Markus Gaugusch \ / ASCII Ribbon Campaign
markus(at)gaugusch.at X Against HTML Mail
/ \

--
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here




< Previous Next >
Follow Ups
References