Then something like

        iptables -t nat -A PREROUTING -i br0 -j ACCEPT
        iptables -t mangle -A PREROUTING -i br0 -j ACCEPT
        iptables -A FORWARD -i br0 -j ACCEPT

seems easier...


cheers  --Lennert

On Sun, Nov 25, 2001 at 05:51:37PM +0100, Bart De Schuymer wrote:

> > Might it be a problem that you can't do the selection per bridge port
> group?
> 
> Could we dynamically create (in the kernel ofcourse) a /proc entry for every
> bridge created, and then do a echo 1 or echo 0 to each of them if we want to
> change the default?
> So an entry like /proc/sys/net/ethernet/bridge/ip_filter/br0 would be
> created when 'brctl addbr br0' is executed. This file being deleted when
> 'brctl delbr br0' is executed.
> Ofcourse this affects the bridge code itself... Dunno if it's worth it.
> 
> cheers,
> Bart
_______________________________________________
Bridge mailing list
[EMAIL PROTECTED]
http://www.math.leidenuniv.nl/mailman/listinfo/bridge

Reply via email to