> A service bound to the IP of eth1 is still visible from eth0.
> This is not an RFC violation (RFC1122 calls this "weak end host"), but

Linux isn't unique in this regard as Solaris has the same behavior. You
are correct in that although likely surprising, it isn't a RFC violation.

On Solaris you can turn this behavior off with:

# ndd -set /dev/ip ip_strict_dst_multihoming 1

On Linux, you could use this IP Tables command (eth0 external, and eth1
internal):

# iptables -A INPUT -i eth0 -d IP_of_eth1 -j DROP

  --Dax Kelson

there a two (supported) ways:
first you have to ethernet-adapters (hme0 + hme1)
put the hostnames in /etc/hostname.hme0 and /etc/hostname.hme1
put the ip-nr and hostname in /etc/inet/hosts
reboot

you have one single adapter (only hme0)
put the hostnames in /etc/hostname.hme0 and /etc/hostname.hme0:1
put the ip-nr and hostname in /etc/inet/hosts
reboot

  --Klaus Grote