From mboxrd@z Thu Jan  1 00:00:00 1970
From: =?koi8-r?Q?=F0=CF=CB=CF=D4=C9=CC=C5=CE=CB=CF_?= =?koi8-r?Q?=EB=CF=D3=D4=C9=CB?=
Date: Fri, 16 Feb 2007 13:37:10 +0000
Subject: Re: [LARTC] ?OT? Linux 2.6: bridge + routing firewall
Message-Id: <1171633030.4769.10.camel@localhost.localdomain>
List-Id: <lartc.vger.kernel.org>
References: <20070215154459.GC6325@softaplic.com.br>
In-Reply-To: <20070215154459.GC6325@softaplic.com.br>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
To: lartc@vger.kernel.org

I have some experience.

It seems that you should explicitely allow bridging in iptables as well
as in ebtables.

So, in addition to my bridge roules in ebtables I also have this rule in
iptables:

iptables -A FORWARD -i br0 -o br0 -j ACCEPT

Otherwise, it could block bridging by later rules or the policy.

В Чтв, 15/02/2007 в 13:44 -0200, Edesio Costa e Silva пишет:
> Hi All!
> 
> I need to deploy a bridge firewall using linux kernel 2.6. I had success
> using kernel 2.4 plus br-nf patch. But the configuration does not work with
> kernel 2.6.
> 
> If the default policy for the iptables FORWARD chain is ACCEPT I have a
> bridge. If iptables FORWARD chain is DROP I have an insulator (no packet
> flows). Any hint?
> 
> I did some google search and in many places they say "kernel 2.6 is not
> recommended", "no luck with kernel 2.6", etc.
> 
> Any link to a success story of a bridge firewall with kernel 2.6? Any
> personal experience?
> 
> Thanks in advance,
> 
> Edésio
> _______________________________________________
> LARTC mailing list
> LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
> 
-- 
Покотиленко Костик <casper@meteor.dp.ua>

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc