Linux Netfilter discussions
 help / color / mirror / Atom feed
From: "Gáspár Lajos" <swifty@freemail.hu>
To: pankaj jain <jainp1979@gmail.com>
Cc: netfilter@lists.netfilter.org
Subject: Re: not [!] rule is not working
Date: Tue, 14 Aug 2007 12:48:08 +0200	[thread overview]
Message-ID: <46C18868.7050306@freemail.hu> (raw)
In-Reply-To: <d41814cf0708132345t45ec0be0vee36c6c88cc5088a@mail.gmail.com>

pankaj jain írta:
> Hi,
> I was trying to drop arp packets such that only specific interface
> should answer the arp requests.
> I added following rules in input chain.
> -j DROP -i !eth1 -o * -d 10.19.1.102 --opcode 1 , pcnt=0 -- bcnt=0
> -j DROP -i !eth2 -o * -d 10.19.51.102 --opcode 1 , pcnt=0 -- bcnt=0
>
>   
I think that this should be in THIS form:

-j DROP ! -i eth1 ....
> as packet count suggests these are not matching against any packet.
> when I do arping from other machine to the 10.19.1.102 (assigned to
> the eth1 interface)
> arp requests are responded from eth0 (ip-10.19.0.102).
> why the rules are not having any effect
Swifty



  reply	other threads:[~2007-08-14 10:48 UTC|newest]

Thread overview: 13+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2007-08-14  6:45 not [!] rule is not working pankaj jain
2007-08-14 10:48 ` Gáspár Lajos [this message]
2007-08-14 12:28   ` pankaj jain
2007-08-14 14:24     ` Grant Taylor
2007-08-14 14:27 ` Grant Taylor
2007-08-14 14:36 ` Grant Taylor
2007-08-16  5:56   ` pankaj jain
2007-08-16 14:39     ` Grant Taylor
2007-08-16 15:07       ` Pascal Hambourg
2007-08-16 15:27         ` Grant Taylor
2007-08-16 21:47           ` Franck Joncourt
2007-08-17  8:09           ` pankaj jain
2007-08-17 13:54             ` Grant Taylor

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=46C18868.7050306@freemail.hu \
    --to=swifty@freemail.hu \
    --cc=jainp1979@gmail.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox