On Friday 2012-08-17 14:48, A G wrote: >This diagram shows the packetflow >http://upload.wikimedia.org/wikipedia/commons/3/37/Netfilter-packet-flow.svg > >1. Does this mean that when I set my computer to bridge mode for >example The packet goes through all of the link layer chains? That is, >it will go through nat/PREROUTING (ebtables), raw/PREROUTING >(iptables), mangle/PREROUTING (iptables) Or does it only go through the >ebtables (blue coloured) chains in the link layer? If the "net.bridge.bridge-nf-call-ip6tables" sysctl is enabled (this is the defualt), it will go through both blue boxes and green boxes. If disabled, only blue boxes will be processed in the blue layer. >2. If it only goes through the blue chains only, if I want it to go >through the iptables chains in the link layer (green coloured), I am >required to have a rule with a DROP target to push it up to to the >higher network layers, is this correct? Using DROP in broute would indeed be the necessary prerequisite, however, that will force routing and deactivate bridging for the packet. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
