On St, 2003-02-26 at 19:57, Bart De Schuymer wrote: > > I tried now assign an IP address to a bridge, then to a eth5.2. > > Both the same like without IP address. The same message in kernel log: > > > > 26 19:20:04 firewall kernel: Performing cross-bridge DNAT requires IP > > forwarding to be enabled > > For what you want to do you will need an IP address for your bridge device and > an entry in your routing table for all traffic that should go through the > bridge device. > Suppose you get the DNAT to server3 to work. Then this server3 will respond to > your eth2 device on the bridge box. Now the routing code of your box needs to > know where to send this message. So you need to tell the code to send it > through your bridge device, by means of a routing table entry.
OK, but i tried it with IP address on the bridge interface and i get the same error message in kernel as i wrote above. I have the same problem like Dimitris Zilaskos a time ago. He was asking the same thig, that he have two interfaces (in my case two subinterfaces) in one bridge without IP address, and thirth interfaces with IP address. On the thirth interface is connected a proxy machine and via bridge flow the traffic and selected traffic is redirected to proxy. In his article he wrote, that this configuration worked him in older kernel releases (2.4.14). I got the same error message about IP forwarding in the kernel like me. But only when he upgraded the kernel and the patch. So i think the problem is not in incompatibility in Bridge and VLAN code (this is my case) or that the bridge don't have the IP address. Becouse the configuration worked in past with earlier versions of bridge patch. here is the conversation with Dimitris Zilaskos: http://www.mail-archive.com/[EMAIL PROTECTED]/msg01619.html Dimitris, when You read this message can you tell me if you solved this problem? If yes, how? tx. kolisko > > -- > cheers, > Bart > -- --- Michal Kolesár [EMAIL PROTECTED] http://kolisko.penguin.cz +420.777.225.297 Don't send me any attachment in Micro$oft (.DOC, .PPT) format please Read http://www.fsf.org/philosophy/no-word-attachments.html Preferable attachments: .PDF, .HTML, .TXT Thanx for adding this text to Your signature _______________________________________________ Bridge mailing list [EMAIL PROTECTED] http://www.math.leidenuniv.nl/mailman/listinfo/bridge
