Hi, I've been running RH 7.2 with a kernel-2.4.9-13brnf0.0.3 for a very long time and works just fine. A couple of weeks ago I thought I'd install a new fresh installation with rh9 and load the bridge module that comes with the rh kernel ( 2.4.20-24.9 ). The bridge itself works just fine but the firewalling dont. There is no packets passing the FORWARD chain... Have I missed something really essential here? The same iptable script works just fine on the old box... Thanks in advance bridge name bridge id STP enabled interfaces br0 8000.0002b332cd6a yes eth0 eth1 Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 SGI3K all -- * * 0.0.0.0/0 SOMEIPADD 0 0 ACCEPT icmp -- eth0 * 0.0.0.0/0 0.0.0.0/0 icmp type 0 limit: avg 3/sec burst 5 0 0 ACCEPT icmp -- eth0 * 0.0.0.0/0 0.0.0.0/0 icmp type 3 0 0 ACCEPT icmp -- eth0 * 0.0.0.0/0 0.0.0.0/0 icmp type 4 0 0 ACCEPT icmp -- eth0 * 0.0.0.0/0 0.0.0.0/0 icmp type 11 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8 limit: avg 3/sec burst 5 0 0 ACCEPT tcp -- eth0 eth1 0.0.0.0/0 0.0.0.0/0 tcp dpt:113 0 0 ACCEPT all -- eth1 eth0 0.0.0.0/0 0.0.0.0/0 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 prefix `FORWARD chain po -- H?kan Stensby E-mail: hst(at)nsc(dot)liu(dot)se
You will probably get a better answer by asking the Ethernet Bridge table folks. Maintainer Bart De Schuymer <bart.de.schuymer@pandora.be> and mailing list ebtables-user@lists.sourceforge.net
On Thursday 18 December 2003 09:46, Hakan Stensby wrote:> Hi, > > I've been running RH 7.2 with a kernel-2.4.9-13brnf0.0.3 for a very long > time and works just fine. > > A couple of weeks ago I thought I'd install a new fresh installation with > rh9 and load the bridge module that comes with the rh kernel ( 2.4.20-24.9 > ). > > The bridge itself works just fine but the firewalling dont. > There is no packets passing the FORWARD chain... Have I missed something > really essential here? > The same iptable script works just fine on the old box...You forgot to apply the appropriate bridge-nf patch, see ebtables.sourceforge.net. cheers, Bart
Apparently Analagous Threads
- [Bridge] Re: Policy match with a bridge
- [Bridge] Bridge Problem with RedHat and iptables
- RE: Promisc routing
- [Bridge] Any way of knowing a packet's been defragmented
- [Bridge] RE: [VLAN] Re: [PATCH/RFC] Let {ip, arp}tables "see" bridged VLAN tagged{I,AR}P packets