On Tuesday 28 September 2010 21:08:53 Magosányi Árpád wrote: > But with three nodes in a linear topology user-A-B-C, the reject > firewall chain (basically the FORWARD chain) eats up the packets user->A > This is the same rule which rejects batman packets A->C which go through > B, and there are the gate interface which I do not understand, so while > the following rules seem to solve the problem at least for three nodes, > I have a feeling that I am not on the right path, and maybe on a way to > cause packet storms. > iptables -A forwarding_rule -d 10.42.0.0/24 ! -s 10.42.0.0/24 -i ath0 -o > ath0 -j ACCEPT > iptables -A forwarding_rule -s 10.42.0.0/24 ! -d 10.42.0.0/24 -o ath0 -i > ath0 -j ACCEPT
Could you explain what kind of traffic you actually want to block ? I also don't understand what packet storm you are afraid of. Regards, Marek
