1

I use a VPN channel for an online banking client.

This channel is implemented as an NDIS filter installed on the outbound network interface which gets activated when you insert the smart card.

When activated, this filter amongst other things blocks all incoming connections on the interface (this is the bank's policy and cannot be changed). This means I cannot RDP to the machine while the filter is active and many other nasty things.

Just setting up a secondary IP address won't help because the filter blocks incoming connections on the interface level, not on the address level.

Now the question is: is it possible to set up an "alias" for the interface (with another IP address of course) which receives all packets the physical interface receives but does not have this NDIS filter bound to it? If it is, how do I do that?

7
  • I'm tempted to say 'try it and see'! But thinking about it further - if the banking client/software was designed with this level of security i'm pretty sure they'll have thought of it and secured against it... You're in 'spoofing' territory.
    – HaydnWVN
    Commented Dec 5, 2011 at 12:26
  • @HaydnWVN: try and see what?
    – Quassnoi
    Commented Dec 5, 2011 at 16:20
  • Now the question is: can I setup an "alias" for the interface
    – HaydnWVN
    Commented Dec 5, 2011 at 16:38
  • @HaydnWVN: sorry if I wasn't clear, English is not my first language. Is it possible to setup an alias for the interface in Windows XP and if it is, how do I do that?
    – Quassnoi
    Commented Dec 5, 2011 at 18:03
  • You can add additional IP addresses to a Network Interface (within Advanced properties of the TCP/IP settings)
    – HaydnWVN
    Commented Dec 6, 2011 at 10:46

0

You must log in to answer this question.