Linux Ethernet Bridging - Apr 2007 - [Bridge] ebtables rules dont work

At 11:45 Uhr +0200 23.05.2004, monade@freenet.de wrote:
Hello,
i have some problems with testing the ebtables on my machine.
It's a Vanilla Kernel 2.6.5 and I selected:

- [*] 802.1d Ethernet Bridging
- Netfilter iptables option

and all ebtables options to compile new for a bridge machine.
This works sucesfully and i installed ebtables v2.0.6.

Now my Problem is that all packets will be Droped in the Forward Chain.
It makes the appearance that it's unimportant wich rule i use.

Here my very simple rule Setup only for testing:
ebtables -P FORWARD DROP
ebtables -P INPUT DROP
ebtables -P OUTPUT DROP
ebtables -A FORWARD -p IPv4 --ip-proto tcp --ip-sport 80 -j ACCEPT

When i use iptables for filtering i can/must see the same effect.

What I'have done wrong ? forgot options in the kernel, forgot rules ?

I don't use ebtables myself but I think there is a rule missing:

	ebtables -A FORWARD -p IPv4 --ip-proto tcp --ip-dport 80 -j ACCEPT

Your rule only covers traffic server --> browser. My rule ACCEPTS the 
traffic from the browser to the web server.


Yours

Hannes Schulz

An HTML attachment was scrubbed...
URL:
http://lists.linux-foundation.org/pipermail/bridge/attachments/20040523/2338be4b/attachment-0002.htm
-------------- next part --------------
Spam detection software, running on the system "fire-2.osdl.org", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or block
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  Hello, i have some problems with testing the ebtables
  on my machine. It's a Vanilla Kernel 2.6.5 and I selected: - [*] 802.1d
  Ethernet Bridging - Netfilter iptables option and all ebtables options
  to compile new for a bridge machine. This works sucesfully and i
  installed ebtables v2.0.6. [...] 

Content analysis details:   (6.4 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 1.1 NO_REAL_NAME           From: does not include a real name
 0.8 HTML_30_40             BODY: Message is 30% to 40% HTML
 0.2 HTML_MESSAGE           BODY: HTML included in message
 0.5 HTML_IMAGE_ONLY_08     BODY: HTML: images with 600-800 bytes of words
 2.0 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 1.1 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML tag
 0.7 PRIORITY_NO_NAME       Message has priority setting, but no X-Mailer