From: Grant Taylor <gtaylor@riverviewtech.net>
To: Mail List - Netfilter <netfilter@lists.netfilter.org>
Subject: Re: How make virtual interfaces ( subinterfaces ) on linux machine
Date: Wed, 06 Dec 2006 02:09:01 -0600 [thread overview]
Message-ID: <45767A9D.8030301@riverviewtech.net> (raw)
In-Reply-To: <457677FF.1010605@gmx.de>
On 12/06/06 01:57, Clemens wrote:
> but now my question: what are you using the is there any advantage
> in using iptables to filter bridged traffic as you noted in my quote
> above? i use ebtables to do all the filtering in the linuxbridge,
> and it works pretty well..
EBTables is a very good basic layer 2 filtering mechanism. However, I
don't think you can do statefull matching with EBTables like you can
with IPTables. By using IPTables to filter traffic for bridges, you can
take advantage of all of the advanced match extensions that you can not
do with EBTables.
Grant. . . .
next prev parent reply other threads:[~2006-12-06 8:09 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-12-05 19:49 How make virtual interfaces ( subinterfaces ) on linux machine Elvir Kuric
2006-12-05 20:13 ` Taylor, Grant
2006-12-05 20:15 ` Pollywog
2006-12-06 6:34 ` Elvir Kuric
2006-12-06 6:40 ` Grant Taylor
2006-12-06 11:05 ` Petr Pisar
2006-12-06 12:20 ` Elvir Kuric
2006-12-06 7:57 ` Clemens
2006-12-06 8:09 ` Grant Taylor [this message]
2006-12-06 8:21 ` Clemens
2006-12-07 11:41 ` Alexandru Dragoi
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=45767A9D.8030301@riverviewtech.net \
--to=gtaylor@riverviewtech.net \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.