Re: VLAN match within iptables

[Pablo Neira Ayuso <pablo@netfilter.org>]

Jaime Nebrera wrote:
>   We are seeking for a way to match rules based on VLAN Tag ID.
> 
>   Searching the archives I have found this post:
> 
> http://lists.netfilter.org/pipermail/netfilter-devel/2006-August/025336.html
> 
>   But the patch is missing and the answer was to use ebtables.
> 
>   Of course ebtables already has this and this is kinda redundant, but
> at the same time things get a bit complex when you have to worry about
> so many marks due to vlan id, ips stuff etc etc
> 
>   Is there any way to access the patch Amin sent to the list?

Since you have to apply that patch to your kernel anyway, I suggest you
to apply the u32 patch instead (it is scheduled for 2.6.23 IIRC).

http://lists.netfilter.org/pipermail/netfilter-devel/2007-June/028189.html
http://lists.netfilter.org/pipermail/netfilter-devel/2007-June/028176.html

Of course, you'll have to define the rule to match the vlan stuff but if
later on you need to match any other minor bit, you'll already have the
way to do so.

-- 
"Países en desarrollo es el nombre con que los expertos designan a los
países arrollados por el desarrollo ajeno" -- Patas Arriba. La Escuela
del Mundo al Revés -- E. Galeano