[Bridge] ebtables

Rajashekhar Mansanpally raj at roinet.com
Tue Jan 13 06:18:55 PST 2004


Hi Stephen,
Thanks for your prompt response.
What I wanted to tell was:
the following cmd DOES NOT WORK..(here 0x828 is my protocol no. that
encapsulates the IP data, like VLAN)
ebtables -A INPUT -p 0x828 -j DROP

BUT the following does work...
ebtables -A INPUT -p 0x800 -j DROP

So, ebtables is not seeing the frame before decapsulation. For that as
Bart schuymer said I need to register my function on NF_BR_PRE_ROUTING
with lower priority.
I don't want any new filter table or extension modules.
I only want the ability to do regular stuff like:
ebtables -A INPUT -p 0x828 -j DROP

So, do you think I still need to create a module.? or
get away editing some stuff..?

PS: OUTPUT and FORWARD chains work..I didn't check for
prerouting, postrouting yet.

Thanks in advance,

Raj




More information about the Bridge mailing list