Re: Block TCP routing but not Multicast

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




HI, Tuan.

I haven't tested it, but I think that disabling "IP forwarding" won't
let you forward *any* IP packet, be it unicast or multicast.

Try ipchains.

Regards,

Mariano

Tuan Hoang ha escrito:
> 
> Hi,
> 
> I have a tiny Linux PC (Mighty Mite) running as a router.
> I runs mrouted and has IP forwarding enabled in /proc.
> My problem is that I want to block TCP from being routed
> but still allow multicast routing via the mrouted.
> 
> Cheap and dirty, can I disable the IP forwarding in /proc and still have
> multicast work via mrouted?
> Or is my only option to use ipchains?
> (Note that this is part of R&D in a lab so I'm not worried about the
> security aspect of ipchains.)
> 
> Thanks,
> Tuan
> 
> -
> : send the line "unsubscribe linux-net" in
> the body of a message to majordomo@vger.kernel.org
-
: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.kernel.org


[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux 802.1Q VLAN]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Git]     [Bugtraq]     [Yosemite News and Information]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux PCI]     [Linux Admin]     [Samba]

  Powered by Linux