Hello, Robert LeBlanc a écrit :
You will need to look at ebtables. Bridging will bypass iptables.
Bridged IPv4 packets traverse the iptables chains if the kernel was compiled with Netfilter bridge support (CONFIG_BRIDGE_NETFILTER=y). It allows finer filtering than ebtables, for instance accepting only outgoing HTTP/HTTPS connections and related ICMP messages in both directions thanks to connection tracking, e.g. :
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A FORWARD -m physdev --physdev-in eth1 -m state --state NEW \ -p tcp -m multiport --dports 80,443 -j ACCEPT
