From mboxrd@z Thu Jan 1 00:00:00 1970 From: liyas_m m Subject: Re: firewall ignore the rule Date: Thu, 14 Jul 2005 10:10:30 +0800 Message-ID: <2452665f0507131910300b00de@mail.gmail.com> References: <2452665f0507130352544ab556@mail.gmail.com> <1121252895.11584.6.camel@anduril.intranet.cartel-securite.net> <2452665f05071318551f788f42@mail.gmail.com> <20050714020155.GA26028@bender.817west.com> Reply-To: liyas_m m Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: In-Reply-To: <20050714020155.GA26028@bender.817west.com> Content-Disposition: inline List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii" To: Jason Opperisano , netfilter@lists.netfilter.org so how do i block that source from transmitting/broadcasting packet? On 7/14/05, Jason Opperisano wrote: > On Thu, Jul 14, 2005 at 09:55:23AM +0800, liyas_m m wrote: > > i have done that and checked with ethereal..still that source address > > is not blocked. It is still broadcasting ARP packets..a lot. >=20 > iptables/netfilter operates at layer 3. therefore, packets generated or > received at layer 2 cannot be blocked with iptables/netfilter. > ethereal/iptraf operate at the BPF layer (layer 2), and arp packets are > layer 2 as well. >=20 > iptables/netfilter is not at fault; you have an invalid testing > methodology. >=20 > -j >=20 > -- > "Peter: Brian, there's a message in my Alpha Bits. It says "OOOOOO". > Brian: Peter, those are Cheerios." > --Family Guy >=20 >