HI,

Please help / suggest on my iptables issue. i having a server Centos 6.5 which ip is "10.0.0.2". server is in NIC bonding using eth0 & eth1. i am able to successfully implement iptables rule using below mentioned script on bond0.

##########################################
#!/bin/bash
/sbin/iptables -F
/sbin/iptables -A INPUT -i lo -j ACCEPT

###For Accessing Port 22
/sbin/iptables -A INPUT -i bond0 -s 10.0.0.5 -d $1 -p tcp --dport 22 -j ACCEPT
/sbin/iptables -A INPUT -i bond0 -s 10.0.0.6 -d $1 -p tcp --dport 22 -j ACCEPT

###For Accessing Port 80
/sbin/iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT

###For Accessing Port 3306
/sbin/iptables -A INPUT -i bond0 -s 10.0.0.5 -d $1 -p tcp --dport 3306 -j ACCEPT

###For Ping Reply
/sbin/iptables -A INPUT -i bond0 -s 10.0.0.5 -d $1 -p icmp -j ACCEPT

### For Established connections
/sbin/iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

### Drop All connections
/sbin/iptables --policy INPUT DROP

### Accept only Related and established connections
/sbin/iptables -A FORWARD -i bond0 -m state --state RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -A OUTPUT -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables --policy OUTPUT ACCEPT
/sbin/iptables-save
##########################################

But now we wanted to assign two more ip's on the same server by creating interface alias. i successfully created & assigned ip to newly created bond0:1 (IP 10.0.0.3) & bond0:2 (IP 10.0.0.4)

But i face the issue that after running above mentioned script using command "sh iptables.sh 10.0.0.2" i am not able to connect ip's which assigned to bond0:1 & bond0:2 interface. i am confused that even after mentioning interface name in script iptables applying its rule to all interface & rejecting incoming request for other interface IP's (eg. bond0:1 & bond0:2).

Please advice how can implement three different iptables rules for three different Ethernet interfaces. i also tried using below mentioned script but still unsuccessful.

Please guide what i am missing or my mistake.

######################################
#!/bin/bash
/sbin/iptables -F
/sbin/iptables -A INPUT -i lo -j ACCEPT

###For Accessing Port 22
/sbin/iptables -A INPUT -i bond0 -s 10.0.0.5 -d $1 -p tcp --dport 22 -j ACCEPT
/sbin/iptables -A INPUT -i bond0:1 -s 10.0.0.5 -d $1 -p tcp --dport 22 -j ACCEPT
/sbin/iptables -A INPUT -i bond0:2 -s 10.0.0.5 -d $1 -p tcp --dport 22 -j ACCEPT

###For Accessing Port 80
/sbin/iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT

###For Accessing Port 3306
/sbin/iptables -A INPUT -i bond0 -s 10.0.0.5 -d $1 -p tcp --dport 3306 -j ACCEPT
/sbin/iptables -A INPUT -i bond0:1 -s 10.0.0.5 -d $1 -p tcp --dport 3306 -j ACCEPT
/sbin/iptables -A INPUT -i bond0:2 -s 10.0.0.5 -d $1 -p tcp --dport 3306 -j ACCEPT

###For Ping Reply
/sbin/iptables -A INPUT -i bond0 -s 10.0.0.5 -d $1 -p icmp -j ACCEPT
/sbin/iptables -A INPUT -i bond0:1 -s 10.0.0.5 -d $1 -p icmp -j ACCEPT
/sbin/iptables -A INPUT -i bond0:2 -s 10.0.0.5 -d $1 -p icmp -j ACCEPT

### For Established connections
/sbin/iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

### Drop All connections
/sbin/iptables --policy INPUT DROP

### Accept only Related and established connections
/sbin/iptables -A FORWARD -i bond0 -m state --state RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -A FORWARD -i bond0:1 -m state --state RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -A FORWARD -i bond0:2 -m state --state RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -A OUTPUT -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables --policy OUTPUT ACCEPT
/sbin/iptables-save
######################################

You only have one interface it is bond0

Any documentation your looking at that uses the int:alias notation is over a decade out of date and I don't think it ever applied to iptables.

I've always been very lazy and used Shorewall to set up and manage iptables rules. You can very easily apply rules to multiple interfaces.