[EMAIL PROTECTED] wrote:

> On Wed, 29 Aug 2001, Bart De Schuymer wrote:
> 
> I've got my kernel built.  The bridge is bridging.  But packets are
> getting past my filters.  To simplify things I got rid of all my user
> defined chains and rules.  Set the policy for INPUT, OUTPUT, and FORWARD
> to DROP.  But I can still ping thru the bridge.


...

> I did have to assign an ip number to br0 to get the bridge to
> work.  And I did have to add some iptables rules to be able to
> ssh to the firewall via the br0 interface.  So we have an odd
> mix of things that are and are not working.


Bridged packets are checked aganist prerouting and postrouting in 2.4, input 
etc. are only for ip I guess, while bridging is raw ethernet.

Marian Jancar

_______________________________________________
Bridge mailing list
[EMAIL PROTECTED]
http://www.math.leidenuniv.nl/mailman/listinfo/bridge

Reply via email to