Networking Forums

Networking Forums > Computer Networking > Linux Networking > Bridge-nf iptables frustration

Reply
Thread Tools Display Modes

Bridge-nf iptables frustration

 
 
tylernt
Guest
Posts: n/a

 
      07-23-2003, 01:18 AM
Running Slackware 9 (kernel 2.4.20) patched with
bridge-nf-0.0.10-against-2.4.20.diff and ebtables 2.0.4. Firewalled
bridge has been running fine for over a month, I have certain ports
blocked and it has been working as expected thus far.

Now, I want to block certain ports going one direction. I.e., if a
packet comes in on one interface, forward it. If it comes in another
interface, drop it.

Googling, I found many many examples of this, for example:

iptables -A FORWARD --in-interface eth1 --out-interface eth0 -p tcp
--dport 8080 -j LOG
iptables -A FORWARD --in-interface eth1 --out-interface eth0 -p tcp
--dport 8080 -j REJECT

I can type these commands in without error, but the rules have no
effect. No packets match the rules and they all get forwarded without
logging.

The exact same iptables command without specifying the interfaces
works fine (though of course it blocks both directions).

So... what's the deal?? Help!!

Additional info:

root@abc:/# brctl show
bridge name bridge id STP enabled interfaces
br0 8000.000bcd4ee2aa yes eth0
eth1

root@abc:/# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination
LOG tcp -- anywhere anywhere tcp
dpt:8080 LOG level warning
REJECT tcp -- anywhere anywhere tcp
dpt:8080 reject-with icmp-port-unreachable

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
13 second frustration lee Network Routers 1 04-14-2007 05:58 PM
wireless frustration Robin Lithaborn Home Networking 4 08-18-2005 09:22 PM
MN500 frustration Docirish Broadband Hardware 5 09-22-2004 11:03 AM
iptables on bridge chain tranversal question Josh T Linux Networking 0 04-27-2004 11:42 AM
Iptables bridge Marcelo Valenzuela Linux Networking 2 02-02-2004 03:27 PM



1 2 3 4 5 6 7 8 9 10 11