[techtalk] ip masquerading

[Brian Sweeney]

'Lo all-

I seem to be having some trouble using a virtual interface for an ip
masquerading rule using ipchains in RHL6.2.  here's the line:

ipchains -A forward -i <public interface> -s 10.10.0.0/16 -j MASQ

On the box, I've got 2 nics...eth0 and eth1.  I've also got a virtual
interface, eth0:1, bound to an IP in the same subnet (obviously) as eth0.
When I specify eth0 in the above line for the public interface, everything
works fine.  But if I specify eth0:1, it simply ceases to even forward the
packet, never mind masquerade it.  A tcpdump of a ping from an internal
client to an external client shows the request coming in on the internal
interface, and nothing coming out on the external.  Any ideas?  The virtual
interface does seem to work in every other respect; I can ping it, ssh to
it, etc.

Thanks in advance,
Brian

-----------------------
Brian J. Sweeney
"I want to know God's thoughts ... the rest are details." -Albert Einstein
Systems Admin, imagedog
bsweeney at imagedog.com