up vote 1 down vote favorite
share [g+] share [fb]

I use a VPN channel for an online banking client.

This channel is implemented as an NDIS filter installed on the outbound network interface which gets activated when you insert the smart card.

When activated, this filter amongst other things blocks all incoming connections on the interface (this is the bank's policy and cannot be changed). This means I cannot RDP to the machine while the filter is active and many other nasty things.

Just setting up a secondary IP address won't help because the filter blocks incoming connections on the interface level, not on the address level.

Now the question is: is it possible to set up an "alias" for the interface (with another IP address of course) which receives all packets the physical interface receives but does not have this NDIS filter bound to it? If it is, how do I do that?

link|improve this question
I'm tempted to say 'try it and see'! But thinking about it further - if the banking client/software was designed with this level of security i'm pretty sure they'll have thought of it and secured against it... You're in 'spoofing' territory. – HaydnWVN Dec 5 '11 at 12:26
@HaydnWVN: try and see what? – Quassnoi Dec 5 '11 at 16:20
Now the question is: can I setup an "alias" for the interface – HaydnWVN Dec 5 '11 at 16:38
@HaydnWVN: sorry if I wasn't clear, English is not my first language. Is it possible to setup an alias for the interface in Windows XP and if it is, how do I do that? – Quassnoi Dec 5 '11 at 18:03
You can add additional IP addresses to a Network Interface (within Advanced properties of the TCP/IP settings) – HaydnWVN Dec 6 '11 at 10:46
show 2 more comments
feedback

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
or
required, but never shown
discard

Browse other questions tagged or ask your own question.