> -----Original Message----- > From: Andrea Bencini [mailto:andrea.bencini@xxxxxx] > Sent: Tuesday, March 04, 2008 9:04 AM > To: netfilter@xxxxxxxxxxxxxxx > Cc: Eric Estes > Subject: Re: bridge firewall and iptables. > > > I have a similar setup and I ended up using ebtables to take care of > > that. > > > > ebtables -A INPUT --in-interface eth0 --protocol ipv4 --ip-protocol udp > > --ip-source-port 67:68 -j DROP > > ebtables -A INPUT --in-interface eth0 --protocol ipv4 --ip-protocol udp > > --ip-destination-port 67:68 -j DROP > > ebtables -A FORWARD --in-interface eth0 --protocol ipv4 --ip-protocol > > udp --ip-destination-port 67:68 -j DROP > > ebtables -A FORWARD --in-interface eth0 --protocol ipv4 --ip-protocol > > udp --ip-source-port 67:68 -j DROP > > Can you tell me where I can put those rules? In which configuration file > and > directory? > Thanks > Andrea > I just created a script that I run at startup. http://forum.openwrt.org/viewtopic.php?pid=31952 -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html