Re: Netfilter and Linux bridge

["Michael R. Schwarzbach" <spg@fs.tum.de>]

[-- Attachment #1: Type: text/plain, Size: 917 bytes --]


Hi,

there is a sourceforge project called bridge, that might interrest you. 
It has a development branch called bridge-nf working on iptables-support 
for bridges. Have a look at: http://bridge.sourceforge.net/devel/bridge-nf/

Regards
Michael

fabrizio.gennari@philips.com wrote:
> I was wondering whether Netfilter can filter away packets handled by Linux 
> bridge. If the bridge forwards the packet to another port, the packet 
> never goes through IP routing, so Netfilter should handle it inside the 
> bridge.
> 
> Also, is it possible to apply rules to packets according to the protocol 
> type in Ethernet header (h_proto in struct ethhdr)? The man page says it 
> is possible to apply rules according to source MAC, but says nothing about 
> Ethernet protocol type.
> 
> Fabrizio Gennari
> Philips Research Monza
> via G.Casati 23, 20052 Monza (MI), Italy
> tel. +39 039 2037816, fax +39 039 2037800
> 



[-- Attachment #2: Type: application/pgp-signature, Size: 255 bytes --]