similar to: [Bridge] problem with Honeynet Project's rc.firewall script

Hi, I'm relatively new to linux world.I'm just trying to setup a bridge firewall between a router and LAN. I've installed Red Hat Linux 9.0 - 2.4.20-8 from installation CDs and upgraded to 2.4.25 successfully. I've patched my kernel to support bridge firewall also loaded ebtables module,so far so good.Now I tried to create a bridge using the code given in the following link

Hi all, I have a bridging firewall running fine with kernel 2.4.31 (Slackware 10.1) and iptables 1.2.11 Yesterday I install the new kernel 2.6.14.3 and iptables 1.3.4 but the bridging firewall doesn't work anymore. Do I need to patch the kernel 2.6 as what I did it for kernel 2.4? Or what I have missed? Regards, ro0ot

Hi, Im trying to find the bridge source code in my kernel implementation. Im running a SUSE Linux kernek 2.4.21-99-default, and I couldnt file the codes I wanted. Maybe I havent installed it correctly, but I dont know then what should I install to have the source codes in my computer. Any help would be appreciated. Thanks -- Francisco Trindade fmtrindade@inf.ufrgs.br

Hi, while testing racoon on Linux (based on the ported ipsec-tools) the following issue appeared: Racoon did not verify the RSA Signatures during Phase 1 in either main or aggressive mode. Authentication was possible using a correct certificate and a wrong private key. I have verified the below problem using racoon-20030711 on FreeBSD 4.9. I will test it using the SNAP Kit but suspect it to be

On Monday 29 September 2003 20:44, DarthPeter wrote: > Hi everyone, Hello, I'm CC-ing the bridge mailing list since there are more people on that one and they might be able to shed more light. > We are trying to build a powerful firewall that could handle > several hundred megabits of traffic and we are running into a problem > with it. We'd like to be able to accomplish

Hello all, I would like to know if it is possible to have 2 bridge instances running - one for the internal network and the other for the external network. What I need to explain is that I need the internal bridge to go though the Linux Kernel and pass its packets to the external network bridge. I am also hopeful that the internal network bridge will not need an IP address as I am hoping to

hello i am a new user for this group. i am working at a ISP. here i want to made a bridge firewall i am using fedora core 3. i want to block a serirs of ip address 192.16.18.0/255.255.255.0 and want to give the accesss only 172.16.18.0/255.255.255.0. but iptables not be able to block ip;s its passes all the ip series. i made my machine as bridge. i think my bridge passes all the

Hi Robert, 2. Any ideas of something to try in order to make this repeatable? > = What i would do to reproduce it, is make a script establishing the bridge, = then flooding the bridge with some external ping -f, then shuting down the = bridge. If there is a refcount release problem, it should appear on eavy = load (some buffer overflow, or something like that). Also, are you playing with

Skipped content of type multipart/alternative

Hi, I tried sending this earlier, but it didn't come through. Apologies if this appers twice on the list. I'm running bridging using the brouter setup described on this page: http://ebtables.sourceforge.net/examples.html "Making a brouter". The setup described there is like this: ifconfig br0 0.0.0.0 ifconfig eth0 172.16.1.1 netmask 255.255.255.0 ifconfig eth1 172.16.2.1

Hello folks, Is it possible to gather snmp statistics from a linux bridge using the Bridge-MIB [rfc 1493 or rfc 4188]? The difference between the two rfc's, I think, is the latter's ability to support SMIv2 syntax. I have started with extracting the MIB from the rfc's and generating dot1dbridge.c and .h files using mib2c. Then i realized that the .c and .h files so generated are just

Skipped content of type multipart/mixed-------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.linux-foundation.org/pipermail/bridge/attachments/20050327/fc61de6b/attachment-0002.pgp

On Thu, 6 Apr 2023 19:30:34 +0800 (CST) yang.yang29 at zte.com.cn wrote: > From: xu xin <xu.xin16 at zte.com.cn> > > This creates six drop reasons as follows, which will help users know the > specific reason why bridge drops the packets when forwarding. > > 1) SKB_DROP_REASON_BRIDGE_FWD_NO_BACKUP_PORT: failed to get a backup > port link when the destination port is

I have read several articles for setting up a network bridge. My configuration is: WorkStation --> Switch0:VLAN1 --> Switch1:VLAN1 --> bridge --> Switch1:VLAN45 --> Laptop I am running CentOS 4.3 on the bridge #> brctl show bridge name bridge id STP enabled interfaces br0 8000.0030843e5aa2 no eth1

hi, = i have my wireless LAN card connected in USB port of linux machine at eth= 1, = = and another wireless LAN card connected to USB port of windows machine. = = the LAN card of windows has been plugged out. now, i want to access the = = internet sites on windows machine through the wireless LAN b/w the 2 = = machines. = I have successfully made a bridge

This adds the checks in 2.6 for invalid ether and deleting wrong bridge port to 2.4.27 (from Erich Schubert) Signed-off-by: Stephen Hemminger <shemminger@osdl.org> diff -Nru a/net/bridge/br_if.c b/net/bridge/br_if.c --- a/net/bridge/br_if.c 2004-06-21 07:47:10 -07:00 +++ b/net/bridge/br_if.c 2004-06-21 07:47:10 -07:00 @@ -19,6 +19,7 @@ #include <linux/inetdevice.h> #include

I want to configure a bridge that has one LAN interface (eth0) and multiple WAN interfaces. However this environment will have a lot of multicast traffic so I don't want any data received on the WAN interfaces to be forwarded to each other, only to eth0. Traffic originating from eth0 would be transmitted in the normal bridging manner on the WAN interfaces. STP is not used in this network.

From: Wei Yongjun <yongjun_wei at trendmicro.com.cn> Using for_each_set_bit_from() to simplify the code. Signed-off-by: Wei Yongjun <yongjun_wei at trendmicro.com.cn> --- net/bridge/br_fdb.c | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/net/bridge/br_fdb.c b/net/bridge/br_fdb.c index b0812c9..48fe761 100644 --- a/net/bridge/br_fdb.c +++ b/net/bridge/br_fdb.c

On Wed, 31 Aug 2005 18:37:00 +0300 "InterClub" <intclub@voliacable.com> wrote: > I need to add to bridge virtual interface with MAC address. > How can I do so? > > > +-----+ > NET 1 eth0---| br |---eth1 NET 2 > +-----+ > | >

On Thu, 21 Dec 2006 14:58:06 +0530 "saravanan chanemouganandam" <saravanan_sprt@hotmail.com> wrote: > Hi everybody, > > I am a newbie in using bridge utils for my application. I have a problem in cross compiling bridge utils on my host x86 development for my target ARM board. I have recently downloaded bridge utils 1.2 version and fascing some compilation porblem. Can