From: Chris Friesen <cfriesen@nortelnetworks.com>
To: netdev@oss.sgi.com, linux-kernel@vger.kernel.org
Subject: firewalling PPPOE stream without terminating it
Date: Fri, 12 Sep 2003 10:32:04 -0400 [thread overview]
Message-ID: <3F61D8E4.6020309@nortelnetworks.com> (raw)
I've got a PPPOE DSL line coming into my house, and I and my roommates
each terminate our own connection and get our own dynamic IP address.
With the recent bunch of viruses/worms, a couple of us were thinking
about setting up a box as a transparent firewalling bridge. The only
tricky bit is that we don't want to terminate the PPPOE connection at
that box, since that would then force us to do NAT/ipmasq.
Does anyone know of any way to filter the contents of a tunnelled packet
(PPPOE in particular) using standard tools like ebtables/iptables?
The other possibility I had considered was a netfilter module that tied
into the ebtables hooks and knew how to look inside the PPPOE packet,
but then I wouldn't get the userspace interface from ebtables/iptables.
Chris
--
Chris Friesen | MailStop: 043/33/F10
Nortel Networks | work: (613) 765-0557
3500 Carling Avenue | fax: (613) 765-2986
Nepean, ON K2H 8E9 Canada | email: cfriesen@nortelnetworks.com
next reply other threads:[~2003-09-12 14:32 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-09-12 14:32 Chris Friesen [this message]
2003-09-15 10:18 ` firewalling PPPOE stream without terminating it Harald Welte
2003-09-15 14:22 ` Chris Friesen
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=3F61D8E4.6020309@nortelnetworks.com \
--to=cfriesen@nortelnetworks.com \
--cc=linux-kernel@vger.kernel.org \
--cc=netdev@oss.sgi.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).