From: Kelbel Junior <kelbel02@gmail.com>
To: rick.jones2@hp.com
Cc: netfilter@vger.kernel.org
Subject: Re: Source MAC address through bridged connection
Date: Thu, 19 May 2011 13:11:27 -0300 [thread overview]
Message-ID: <BANLkTikujJHoQv1hb-PdaAYyPukOpei4XA@mail.gmail.com> (raw)
In-Reply-To: <1305821120.8149.1094.camel@tardy>
Well, being more specific...
The computer between the clients and the Mikrotik (border gateway) is
a squid proxy operating in bridge, to intercept all traffic on the
port 80
2011/5/19 Rick Jones <rick.jones2@hp.com>:
> On Thu, 2011-05-19 at 12:52 -0300, Kelbel Junior wrote:
>> Hi guys!
>>
>> I have the following scenario:
>>
>> Clients Network <------> Linux router <------> Mikrotik gateway
>> <------> INTERNET
>>
>> Happens what the Mikrotik gateway controls the clients from the mac
>> address (joining an ip to an MAC address) and when i put the linux
>> router between they the control don't works.
>> I saw on the MK(mikrotik) the packets coming in with the MAC address
>> from the bridge, and this is a problem.
>>
>> Exist some way to preserve the source mac through a bridged
>> connection, to continue seeing the mac address of the clients?
>
> Is the device in the middle a router, or is it a bridge? The
> distinction is quite important.
>
> Conceptually, a router does it's thing at layer three of the (in)famous
> seven-layer model (*). That means it only "preserves" layer three and
> above. Layer 2 and below is not preserved.
>
> A bridge (or (multiport)switch, ignoring marktroid-speak about "L3
> switching") does it's thing at layer two. That means it preserves layer
> two and above. Layer 1 (physical) is not preserved.
>
> rick jones
>
> * there is also the nine-layer model
> http://www.isc.org/store/logoware-clothing/isc-9-layer-osi-model-cotton-t-shirt
>
>
--
Att.
Kelbel Junior
next prev parent reply other threads:[~2011-05-19 16:11 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2011-05-19 15:52 Source MAC address through bridged connection Kelbel Junior
2011-05-19 16:05 ` Rick Jones
2011-05-19 16:11 ` Kelbel Junior [this message]
2011-05-21 12:47 ` Ed W
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=BANLkTikujJHoQv1hb-PdaAYyPukOpei4XA@mail.gmail.com \
--to=kelbel02@gmail.com \
--cc=netfilter@vger.kernel.org \
--cc=rick.jones2@hp.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).