This is all fine but your wireless stations will not route though the iptables when they are on the same antenna. I am not sure if the iptables is right but you will need to do the following:
Taken from the hostap readme Usage: prism2_param <interface> <parameter> [value] ex. prism2_param netcs0 ap_bridge_packets 0 ap_bridge_packets: 0 = do not bridge packets between associated stations, i.e., just pass them to upper layers for handling 1 = bridge packets directly between associated tations,i.e., upper layers do not even see these packets > Hello All - > > I'd like to filter netbios communications between my wireless clients. > I make iptables rule(s) that should stop all the traffic between the > wireless folks, but they are still able to do windows shares, etc. I > would assume that: > > iptables -A FORWARD -i netcs0 -o netcs0 -j DROP > > where netcs0 is my wireless interface would stop them from seeing one > another, but it doesn't. Advertised shares are visible and can be used > through my soekris box anyway. > >>From my reading, I'm getting the idea that netbios (or netbuei?) is the > protocol being used by windows to advertise and implement windows > networking (shares, etc.). Is that independant of IP? Shouldn't > iptables be able to filter that anyway? tcpdump doesn't list an IP > address for the traffic I believe I'm trying to stop, just MAC addresses > and things like 'sap' and 'ip-sap' instead of port numbers. > > How do I filter windows networking traffic with my soekris box / wisp > combo? > > Thanks. > > -- > Shaun McIntyre > [EMAIL PROTECTED] -- Jim TerWee | Our capacity for understanding is [EMAIL PROTECTED] | inversely proportional to how Invisimax | much we think we know. The more I | know, the more I don't know! ------------------------------------------------------- This SF.net email is sponsored by: The Definitive IT and Networking Event. Be There! NetWorld+Interop Las Vegas 2003 -- Register today! http://ads.sourceforge.net/cgi-bin/redirect.pl?keyn0001en _______________________________________________ leaf-wisp-dist mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-wisp-dist