Re: Bridges

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Friday 2010-08-20 18:25, Grant Taylor wrote:

> On 08/20/10 11:18, Jan Engelhardt wrote:
>> ARP proxying with ebtables, basically. (Though there is also a routing-level
>> arp proxy, but somehow it does not feel as steady.)
>
> ARP proxying with EBTables?  Would you mind providing an example use?

ebtables -t broute ! -p arp -j DROP
ebtables -t nat -A PREROUTING -i br0 \
	-p arp --arp-opcode request --arp-ip-dst mysubnet/CIDR \
	-j arpreply --arpreply-mac \
	$(cat /sys/class/net/br0/address)

Something like that it was.

ARP proxying can be helpful when your entire mysubnet/CIDR is 
direct-attached at the ISP's end but you don't want to bridge your 
network (for that would mean more ebtables and iptables rules) but 
instead force routing.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux