From mboxrd@z Thu Jan 1 00:00:00 1970 From: agashi shipora Subject: uisng L7 filter in ebtables commands Date: Wed, 31 Mar 2010 23:54:28 +0530 Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Cc: netfilter@vger.kernel.org To: netfilter-devel@vger.kernel.org Return-path: Sender: netfilter-owner@vger.kernel.org List-Id: netfilter-devel.vger.kernel.org I want to use L7 filter with ebtables for setting a MARK on the packet similar to how it is being done with iptables today. Using brouting the bridge packet can be re-directed to the routing path traversing the iptables.But all packets arriving on the interface enslaved to the bridge would have to be brouted.This may not be acceptable as a solution in my case. example: Whats available: iptables -t filter -A FORWARD -m layer7 --l7proto edonkey -j MARK --set-mark 3 What needs to be supported: ebtables -t nat -A PRE-ROUTING -m layer7 --l7proto edonkey -j MARK --mark-set 3 Is any work going on to port L7 filter to ebtables or does this port of L7 filter already exist? Thanks GP