Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I use a VPN channel for an online banking client.

This channel is implemented as an NDIS filter installed on the outbound network interface which gets activated when you insert the smart card.

When activated, this filter amongst other things blocks all incoming connections on the interface (this is the bank's policy and cannot be changed). This means I cannot RDP to the machine while the filter is active and many other nasty things.

Just setting up a secondary IP address won't help because the filter blocks incoming connections on the interface level, not on the address level.

Now the question is: is it possible to set up an "alias" for the interface (with another IP address of course) which receives all packets the physical interface receives but does not have this NDIS filter bound to it? If it is, how do I do that?

share|improve this question
I'm tempted to say 'try it and see'! But thinking about it further - if the banking client/software was designed with this level of security i'm pretty sure they'll have thought of it and secured against it... You're in 'spoofing' territory. – HaydnWVN Dec 5 '11 at 12:26
@HaydnWVN: try and see what? – Quassnoi Dec 5 '11 at 16:20
Now the question is: can I setup an "alias" for the interface – HaydnWVN Dec 5 '11 at 16:38
@HaydnWVN: sorry if I wasn't clear, English is not my first language. Is it possible to setup an alias for the interface in Windows XP and if it is, how do I do that? – Quassnoi Dec 5 '11 at 18:03
You can add additional IP addresses to a Network Interface (within Advanced properties of the TCP/IP settings) – HaydnWVN Dec 6 '11 at 10:46

You must log in to answer this question.

Browse other questions tagged .