netfilter.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Kelbel Junior <kelbel02@gmail.com>
To: rick.jones2@hp.com
Cc: netfilter@vger.kernel.org
Subject: Re: Source MAC address through bridged connection
Date: Thu, 19 May 2011 13:11:27 -0300	[thread overview]
Message-ID: <BANLkTikujJHoQv1hb-PdaAYyPukOpei4XA@mail.gmail.com> (raw)
In-Reply-To: <1305821120.8149.1094.camel@tardy>

Well, being more specific...
The computer between the clients and the Mikrotik (border gateway) is
a squid proxy operating in bridge, to intercept all traffic on the
port 80

2011/5/19 Rick Jones <rick.jones2@hp.com>:
> On Thu, 2011-05-19 at 12:52 -0300, Kelbel Junior wrote:
>> Hi guys!
>>
>> I have the following scenario:
>>
>> Clients Network <------> Linux router <------> Mikrotik gateway
>> <------> INTERNET
>>
>> Happens what the Mikrotik gateway controls the clients from the mac
>> address (joining an ip to an MAC address) and when i put the linux
>> router between they the control don't works.
>> I saw on the MK(mikrotik) the packets coming in with the MAC address
>> from the bridge, and this is a problem.
>>
>> Exist some way to preserve the source mac through a bridged
>> connection, to continue seeing the mac address of the clients?
>
> Is the device in the middle a router, or is it a bridge?  The
> distinction is quite important.
>
> Conceptually, a router does it's thing at layer three of the (in)famous
> seven-layer model (*).  That means it only "preserves" layer three and
> above.  Layer 2 and below is not preserved.
>
> A bridge (or (multiport)switch, ignoring marktroid-speak about "L3
> switching") does it's thing at layer two.  That means it preserves layer
> two and above.  Layer 1 (physical) is not preserved.
>
> rick jones
>
> * there is also the nine-layer model
> http://www.isc.org/store/logoware-clothing/isc-9-layer-osi-model-cotton-t-shirt
>
>



-- 

Att.
Kelbel Junior

  reply	other threads:[~2011-05-19 16:11 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2011-05-19 15:52 Source MAC address through bridged connection Kelbel Junior
2011-05-19 16:05 ` Rick Jones
2011-05-19 16:11   ` Kelbel Junior [this message]
2011-05-21 12:47     ` Ed W

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=BANLkTikujJHoQv1hb-PdaAYyPukOpei4XA@mail.gmail.com \
    --to=kelbel02@gmail.com \
    --cc=netfilter@vger.kernel.org \
    --cc=rick.jones2@hp.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).