relocating packets

Henrik Nordstrom hno at marasystems.com
Thu Oct 13 23:53:41 CEST 2005


On Thu, 13 Oct 2005, Mark Oden wrote:

> Assuming I had two NICs in my machine that happen to be on the same network, 
> is there a way to force packets of certain ports to use only one NIC or IP?

If you have multiple NICs in the same Ethernet broadcast segment then I 
would recommend you to enable "arp_ignore".

    echo 1 >/proc/sys/net/ipv4/conf/all/arp_ignore

If not things will get very confusing with traffic "randomly" coming in on 
either interface.

Once this is done you can firewall each NIC separately as you please, 
policy routing, marking etc to control how the interfaces are used.

Regards
Henrik



More information about the netfilter mailing list