All of lore.kernel.org
 help / color / mirror / Atom feed
From: Steve Comfort <steve@4Dllc.com>
To: ebtables-user <ebtables-user@lists.sourceforge.net>,
	netfilter <netfilter@lists.netfilter.org>
Subject: The penny has dropped
Date: Mon, 13 Sep 2004 15:34:51 +0200	[thread overview]
Message-ID: <4145A1FB.3090101@4Dllc.com> (raw)

Hi all,

I have an access point with physical interfaces ath0 (wireless) and ixp1 
(ethernet). I set it up to operate as a bridge (br0) with the aforegoing 
interfaces being the bridge ports. I'd been racking my brains for a 
couple of days trying to figure out why I wasn't dropping any packets 
received on interface ath0. (I was trying to limit pings).

Eventually I had an eureka moment, when I realised that the other side 
of my connection was PPPoE. So the client side was tunneling directly to 
the PPPoE server running on the ethernet side of the access point. Hence 
all the pings I was trying to limit were being encapsulated by PPPoE, 
and hence no rules were matching. Yes, I can be really stupid at times!

So the question now is whether it is possible to filter out these 
"encapsulated" pings, maybe by examining the embedded header within the 
PPPoE encapsulation?

Best regards
Steve



                 reply	other threads:[~2004-09-13 13:34 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4145A1FB.3090101@4Dllc.com \
    --to=steve@4dllc.com \
    --cc=ebtables-user@lists.sourceforge.net \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.