From: "José Irigon" <irigon@gmail.com>
To: netfilter@lists.netfilter.org
Subject: Bridge + iptables + REJECT
Date: Fri, 27 Aug 2004 20:38:01 -0300 [thread overview]
Message-ID: <2cbad29704082716383a7d33d4@mail.gmail.com> (raw)
Hi, I read all messages sent to list about topics like this, but none
of them solved my doubt.
I want to do a stealth firewall, a firewall in a bridge which an
mallicious client can´t find it.
This is the idea:
When a packet arrive at the bridge (from de outside) if the rules of
iptables/ebtables permit it continue, ok. If not, the bridge should
reply with packages with the client´s ip and rejecting these packages.
The problem is I tried use "-j REJECT --reject-with tcp-reset" for
example, but the bridge seems to can not reply that packages.
At begining I thought it was cause haven´t the bridge ip, it couldn´t
send packages back, but I read in
http://sourceforge.net/mailarchive/forum.php?thread_id=4073001&forum_id=8573
that it is possible.
I recompile kernel and tried anything I believe could be the erlevant,
but nothing.
Can anyone tell me what could be!?
I´m using Slackware 9.1 with kernel 2.6.8.1, but I tried with 2.4.22
and didn´t work either...
[]´s!
reply other threads:[~2004-08-27 23:38 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=2cbad29704082716383a7d33d4@mail.gmail.com \
--to=irigon@gmail.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.