This is all fine but your wireless stations will not route though the
iptables when they are on the same antenna. I am not sure if the iptables
is right but you will need to do the following:

Taken from the hostap readme

Usage: prism2_param <interface> <parameter> [value]

ex. prism2_param netcs0 ap_bridge_packets 0

ap_bridge_packets:
                0 = do not bridge packets between associated stations, i.e.,
                        just pass them to upper layers for handling
                1 = bridge packets directly between associated tations,i.e.,
                        upper layers do not even see these packets


> Hello All -
>
> I'd like to filter netbios communications between my wireless clients.
> I make iptables rule(s) that should stop all the traffic between the
> wireless folks, but they are still able to do windows shares, etc.  I
> would assume that:
>
>     iptables -A FORWARD -i netcs0 -o netcs0 -j DROP
>
> where netcs0 is my wireless interface would stop them from seeing one
> another, but it doesn't.  Advertised shares are visible and can be used
> through my soekris box anyway.
>
>>From my reading, I'm getting the idea that netbios (or netbuei?) is the
> protocol being used by windows to advertise and implement windows
> networking (shares, etc.).  Is that independant of IP?  Shouldn't
> iptables be able to filter that anyway?  tcpdump doesn't list an IP
> address for the traffic I believe I'm trying to stop, just MAC addresses
> and things like 'sap' and 'ip-sap' instead of port numbers.
>
> How do I filter windows networking traffic with my soekris box / wisp
> combo?
>
> Thanks.
>
> --
> Shaun McIntyre
> [EMAIL PROTECTED]



-- 
Jim TerWee       | Our capacity for understanding is
[EMAIL PROTECTED]   | inversely proportional to how
Invisimax        | much we think we know. The more I
                 | know, the more I don't know!




-------------------------------------------------------
This SF.net email is sponsored by:
The Definitive IT and Networking Event. Be There!
NetWorld+Interop Las Vegas 2003 -- Register today!
http://ads.sourceforge.net/cgi-bin/redirect.pl?keyn0001en
_______________________________________________
leaf-wisp-dist mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-wisp-dist

Reply via email to