Re: More ethernet port same ip address

[Michele Petrazzo - Unipex srl <michele.petrazzo@unipex.it>]

Jan Engelhardt wrote:
>> Ok. Thanks for the simple, but complete explain. But  where to say 
>> "go out through the right one?"
> 
> The fact is, you do not know in advance which is the right one.

So there is no solution with the "marking into PREROUTING" technique?
Into my environ a packet that come from an interface MUST go out through
that one.

>>> And depending on the situation you might also need to enforce 
>>> routing at the bridge border so as to not open security holes.
>> Have you some more words about this? Where can I found problems? 
>> How to modify routing?
> 
> ebtables -t broute -P BROUTING DROP
> 
> which will force all packets being routed.

I'll try it soon.
But in this case, why the kernel doesn't "lost" the package that ebtables
wants to DROP? Or the kernel starts to see which is the first hole where
the packet can go inside and leave it there?
Seem a very contorted thinking to me...

Thanks,
MIchele