On 2004-06-30, Adam Hewgill <ahewgill@xxxxxxxxxxx> wrote: > If you are using a machine as an ethernet bridge how are you > configuring it (include distro specific stuff) to create and enable the > bridge during the boot process? Here's a simple setup borrowed from my home firewall, snipped to show only the bridge-related setup. I have a four-port tulip and one half of a dual eepro100 forming a broadcast medium via a brouter. relevant init.d/firewall: BRBIN=brctl BRIDGE=br0 INTERNAL_NETMASK=24 INTERNAL_IP=192.168.0.1 BR_ADDR="$INTERNAL_IP/$INTERNAL_NETMASK" for i in `seq 1 5` BR_IFACES="eth1 eth2 eth3 eth4 eth5" case "$1" in start) $BRBIN addbr $BRIDGE for i in $BR_IFACES ; do $BRBIN addif $BRIDGE $i ip l set up dev $i done ip l set up dev $BRIDGE ip a a $BR_ADDR dev $BRIDGE ;; stop) ip a d $BR_ADDR dev $BRIDGE ip l set down dev $BRIDGE for i in $BR_IFACES ; do ip l set down dev $i $BRBIN delif $BRIDGE $i done $BRBIN delbr $BRIDGE ;; esac with debian, man update-rc.d to get it going. i try to hit right after interface naming and before firewall setup. do remember that default behavior will allow any ip on the machine to be hit through the bridge (at least by my experience in 2.[46]), so firewall things well. -- nick black <dank@xxxxxxxxxxxxxxxxxx> "np: nondeterministic polynomial-time the class of dashed hopes and idle dreams." - the complexity zoo