Re: Brigde and Firewall with linux

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



 --- Cedric Blancher <blancher@xxxxxxxxxxxxxxxxxx> a
écrit : 
> On 2.6 kernels, output interface will be br0, not
> eth0. So you'll have
> to use physdev match in order to have your rule work
> :
> 	iptables -t nat -A POSTROUTING -m physdev
> --physdev-out eth1 \
> 		-j SNAT --to 192.168.0.21
> 
> I don't know if this behaviour has been backported
> to 2.4 kernels. At
> least, you can try ;)

I thought you could only use the FORWARD CHAIN when
it's a bridge, because a bridge only passes packets
from one interface to another (?)

_________________________________________________________________
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Mail : http://fr.mail.yahoo.com


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux