Re: arptables

Re: arptables

[Harald Welte]

[-- Attachment #1: Type: text/plain, Size: 767 bytes --]

On Wed, Feb 05, 2003 at 04:59:55PM +1100, Shaun Butler wrote:
> Harold
> 
> I noticed a posting on one of the Netfilter lists where you asked about a 
> working example of the arptables extension of iptables. Have you managed 
> to get your hands on such an example or documentation or anything that can 
> point me in the right direction? 

arptables was developed by David Miller <davem@redhat.com>, outside the
netfilter development team. 


> Shaun Butler
-- 
- Harald Welte / laforge@gnumonks.org               http://www.gnumonks.org/
============================================================================
"If this were a dictatorship, it'd be a heck of a lot easier, just so long
 as I'm the dictator."  --  George W. Bush Dec 18, 2000

[-- Attachment #2: Type: application/pgp-signature, Size: 232 bytes --]

redirect a HTTP-connection only once

[Karl Gruber]

Hi!

I want to know if it is possible that an iptables-rule matches only once. I 
want to implement a redirection of the first http-request of an user.

thanx,
     Karl

arptables

[Toshihiro Sonoda]

hi,

I can find the arp_filter.c and arp_tables.c in "net/ipv4/netfilter/" of kernel tree (2.4.18).
But, I can not find the document about how to use the arp filtering.

How can I use the arp filtering in linux.
Please teach me.

regard, toshihiro.

Re: arptables

[Cedric Blancher]

Le mar 19/11/2002 à 07:47, Toshihiro Sonoda a écrit :
> I can find the arp_filter.c and arp_tables.c in "net/ipv4/netfilter/" of kernel tree (2.4.18).
> But, I can not find the document about how to use the arp filtering.
> How can I use the arp filtering in linux.

Akaik, there's still no userland tool to configure ARP filtering into
kernel (aka arptables tool) and associated library.

So the first step would be implementing kernel/userland interface...

-- 
Cédric Blancher  <blancher@cartel-securite.fr>
Consultant en sécurité des systèmes et réseaux  - Cartel Sécurité
Tél: +33 (0)1 44 06 97 87 - Fax: +33 (0)1 44 06 97 99
PGP KeyID:157E98EE  FingerPrint:FA62226DA9E72FA8AECAA240008B480E157E98EE

Re: arptables

[Ben Russo]

On Fri, 2002-11-22 at 05:18, Cedric Blancher wrote:
> Le mar 19/11/2002 à 07:47, Toshihiro Sonoda a écrit :
> > I can find the arp_filter.c and arp_tables.c in "net/ipv4/netfilter/" of kernel tree (2.4.18).
> > But, I can not find the document about how to use the arp filtering.
> > How can I use the arp filtering in linux.
> 
> Akaik, there's still no userland tool to configure ARP filtering into
> kernel (aka arptables tool) and associated library.
> 
> So the first step would be implementing kernel/userland interface...

Just a half baked idea....

I havent tested this, but the /etc/ethers (man 5 ethers)
is used for storing arp cache information statically, like /etc/hosts
in /etc/rc.local you could call:

/sbin/arp -f /etc/ethers

The /etc/ethers file might contain:
	00:08:02:88:88:88 10.10.10.10

If you had no 10.10.10.10 anywhere on your network!
Then you could set rules in your iptables that DROP all 10.10.10.10 
packets from source and destination, in all tables.

From the "arp" man page "If the temp flag is
              not supplied entries will be permanent stored  into
              the ARP cache."

-Ben.

arptables

[Paryl Tomasz]

Hi

Does anyone how to use arptables in 2.4.18 pre 19 ?.
I was sucessfully applly two modules into ther ram and what how ?
Is there any doc ? 

Tom