Search This Blog

Thursday, July 21, 2005

Re: activate iptables rules on a bridge module installed debian machine

On 21 Jul 2005, Uğur Büyükdemirci wrote:

> We use debian 3.1 to accomplish a firewall application. We use
> iptables (1.2.11 default installed on debian) and bridge (erhernet
> bridging-1.0.6). We can configure bridge utulities and we can use it
> as a transparent machine on our network. But we want to use iptables
> to restrict the network traffic. We use this system for restrict the
> p2p programs on our network. We can't activate the iptables rules on
> this machine. We can see iptables rules but it cant work as we want.

As far as I know, to get iptables to work on a *bridged* network, rather
than an IP layer forwarding network, you need different tools.

Grab the 'ebtables' package, and have a look at the documentation there.
That should point you in the right direction.

Daniel

--
It is rather ridiculous to ask a man just about to be boiled in a pot and
eaten, at a purely religious feast, why he does not regard all religions as
equally friendly and fraternal.
-- _The Everlasting Man_, 1925

--
To UNSUBSCRIBE, email to debian-firewall-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

No comments: