On 04/28/2014 10:34 PM, richard lucassen wrote:
On Mon, 28 Apr 2014 09:23:31 +0530
Vigneswaran R <vignesh@xxxxxxxxxxx> wrote:
It seems, iptable rules will not affect the ARP.
No, it should not :)
By any chance you
have arptables or ebtables installed on srv1 which is causing the
problem?
Nope:
# ebtables -L
Bridge table: filter
Bridge chain: INPUT, entries: 0, policy: ACCEPT
Bridge chain: FORWARD, entries: 0, policy: ACCEPT
Bridge chain: OUTPUT, entries: 0, policy: ACCEPT
# arptables -L
Chain INPUT (policy ACCEPT)
Chain OUTPUT (policy ACCEPT)
Chain FORWARD (policy ACCEPT)
I just don't understand why srv1 is not arp-replying to the ip
addresses it owns...
Did you check the rp_filter also? Try disabling the rp_filter on srv1
(if it is not disabled already) and check.
(Just in case the source IP of the arp request and the incoming
Interface are not matching according to the routing table entries).
echo "0" > /proc/sys/net/ipv4/conf/eth1/rp_filter
regards,
Vignesh
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
