I have a DSL card (a Traverse Technologies Solos ATM/DSL card) than exposes a PPPoE adaptation layer as an ethernet interface (nas0). I've set up bridging (br0=eth0+nas0). And I'm using an iptables based firewall (Arno's iptables firewall 1.9.2c). I'm running PPP over br0. (Why did I do this? So I could stick a packet sniffer on eth0 and get traces of everything going out over the DSL...) Problem is, I can't tell if I need to set my external (ingress) interface to br0, or to ppp0... because the logs show both (IN=br0 and IN=ppp0) -- even for the same packet! Not sure why. Any suggestions (besides "don't use bridging!!!")? Is this an artifact of PPP and pseudo-interfaces, or of bridging, or both? Thanks, -Philip Aug 18 13:34:01 pbx user.warn kernel: TRACE: raw:PREROUTING:policy:3 IN=br0 OUT= PHYSIN=nas0 MAC=00:00:01:00:00:00:00:21:a1:75:b8:1c:88:64 SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 SEQ=3305819212 Aug 18 13:34:01 pbx user.warn kernel: TRACE: mangle:PREROUTING:policy:1 IN=br0 OUT= PHYSIN=nas0 MAC=00:00:01:00:00:00:00:21:a1:75:b8:1c:88:64 SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 SEQ=33058192 Aug 18 13:34:01 pbx user.warn kernel: TRACE: nat:PREROUTING:rule:1 IN=br0 OUT= PHYSIN=nas0 MAC=00:00:01:00:00:00:00:21:a1:75:b8:1c:88:64 SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 SEQ=3305819212 AC Aug 18 13:34:01 pbx user.warn kernel: TRACE: nat:NAT_PREROUTING_CHAIN:return:1 IN=br0 OUT= PHYSIN=nas0 MAC=00:00:01:00:00:00:00:21:a1:75:b8:1c:88:64 SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 SEQ=3 Aug 18 13:34:01 pbx user.warn kernel: TRACE: nat:PREROUTING:rule:16 IN=br0 OUT= PHYSIN=nas0 MAC=00:00:01:00:00:00:00:21:a1:75:b8:1c:88:64 SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 SEQ=3305819212 A Aug 18 13:34:01 pbx user.warn kernel: TRACE: nat:POST_NAT_PREROUTING_CHAIN:return:1 IN=br0 OUT= PHYSIN=nas0 MAC=00:00:01:00:00:00:00:21:a1:75:b8:1c:88:64 SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 Aug 18 13:34:01 pbx user.warn kernel: TRACE: nat:PREROUTING:policy:17 IN=br0 OUT= PHYSIN=nas0 MAC=00:00:01:00:00:00:00:21:a1:75:b8:1c:88:64 SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 SEQ=3305819212 Aug 18 13:34:01 pbx user.warn kernel: TRACE: mangle:INPUT:policy:1 IN=ppp0 OUT= PHYSIN=nas0 MAC= SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 SEQ=3305819212 ACK=0 WINDOW=5840 RES=0x00 SYN URGP=0 OPT Aug 18 13:34:01 pbx user.warn kernel: TRACE: filter:INPUT:rule:1 IN=ppp0 OUT= PHYSIN=nas0 MAC= SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 SEQ=3305819212 ACK=0 WINDOW=5840 RES=0x00 SYN URGP=0 OPT (0 Aug 18 13:34:01 pbx user.warn kernel: TRACE: filter:BASE_INPUT_CHAIN:return:6 IN=ppp0 OUT= PHYSIN=nas0 MAC= SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 SEQ=3305819212 ACK=0 WINDOW=5840 RES=0x00 SYN Aug 18 13:34:01 pbx user.warn kernel: TRACE: filter:INPUT:rule:2 IN=ppp0 OUT= PHYSIN=nas0 MAC= SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 SEQ=3305819212 ACK=0 WINDOW=5840 RES=0x00 SYN URGP=0 OPT (0 Aug 18 13:34:01 pbx user.warn kernel: TRACE: filter:INPUT_CHAIN:return:1 IN=ppp0 OUT= PHYSIN=nas0 MAC= SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 SEQ=3305819212 ACK=0 WINDOW=5840 RES=0x00 SYN URGP= Aug 18 13:34:01 pbx user.warn kernel: TRACE: filter:INPUT:rule:3 IN=ppp0 OUT= PHYSIN=nas0 MAC= SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 SEQ=3305819212 ACK=0 WINDOW=5840 RES=0x00 SYN URGP=0 OPT (0 Aug 18 13:34:01 pbx user.warn kernel: TRACE: filter:HOST_BLOCK:return:11 IN=ppp0 OUT= PHYSIN=nas0 MAC= SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 SEQ=3305819212 ACK=0 WIN Aug 18 13:34:01 pbx user.warn kernel: TRACE: filter:INPUT:rule:4 IN=ppp0 OUT= PHYSIN=nas0 MAC= SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 SEQ=3305819212 ACK=0 WINDOW=5840 RES=0x00 SYN URGP=0 OPT (0 Aug 18 13:34:01 pbx user.warn kernel: TRACE: filter:SPOOF_CHK:return:5 IN=ppp0 OUT= PHYSIN=nas0 MAC= SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 SEQ=3305819212 ACK=0 WINDOW=5840 RES=0x00 SYN URGP=0 Aug 18 13:34:01 pbx user.warn kernel: TRACE: filter:INPUT:rule:8 IN=ppp0 OUT= PHYSIN=nas0 MAC= SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 SEQ=3305819212 ACK=0 WINDOW=5840 RES=0x00 SYN URGP=0 OPT (0 Aug 18 13:34:01 pbx user.warn kernel: TRACE: filter:VALID_CHK:return:22 IN=ppp0 OUT= PHYSIN=nas0 MAC= SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 SEQ=3305819212 ACK=0 WINDOW=5840 RES=0x00 SYN URGP=0 Aug 18 13:34:01 pbx user.warn kernel: TRACE: filter:INPUT:rule:9 IN=ppp0 OUT= PHYSIN=nas0 MAC= SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 SEQ=3305819212 ACK=0 WINDOW=5840 RES=0x00 SYN URGP=0 OPT (0 Aug 18 13:34:01 pbx user.warn kernel: TRACE: filter:EXT_INPUT_CHAIN:rule:58 IN=ppp0 OUT= PHYSIN=nas0 MAC= SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 SEQ=3305819212 ACK=0 WINDOW=5840 RES=0x00 SYN UR Aug 18 13:34:01 pbx user.info kernel: AIF:UNPRIV connect attempt: IN=ppp0 OUT= PHYSIN=nas0 MAC= SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 WINDOW=5840 RES=0x00 SYN URGP=0 Aug 18 13:34:01 pbx user.warn kernel: TRACE: filter:EXT_INPUT_CHAIN:rule:61 IN=ppp0 OUT= PHYSIN=nas0 MAC= SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 SEQ=3305819212 ACK=0 WINDOW=5840 RES=0x00 SYN UR Aug 18 13:34:01 pbx user.warn kernel: TRACE: filter:POST_INPUT_DROP_CHAIN:return:1 IN=ppp0 OUT= PHYSIN=nas0 MAC= SRC=66.232.79.143 DST=63.224.43.239 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=44335 DF PROTO=TCP SPT=42905 DPT=22007 SEQ=3305819212 ACK=0 WINDOW=5840 RES=0x00 -- To unsubscribe from this list: send the line "unsubscribe linux-net" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
