On 01/02/2013 05:47 PM, Mr Dash Four wrote:
> 
>> I checked out arptables on Fedora. The package is arptables_jf; the
>> synopsis says that:
>>
>>      Arptables_jf is a fork of arptables from
>>      ebtables.sourceforge.net written by Jay Fenlason.
>>
>> So apparently, Jay decided that the etables team has been neglecting his
>> baby and has decided to take it back.
> Don't know who he is (as if I would care, though - there are a lot of 
> self-inflated egos in that circle who think they are the next 
> Ein-bloody-stein), but if he decided to fork it on his own, that's 
> always a bad sign, so stay well-clear indeed. I also just noticed the 
> version of arptables_jf (as distributed by Fedora) - 0.0.8 - that 
> doesn't fill me with much confidence. No wonder I couldn't get a lot of 
> the stuff to work "as advertised" - as my last few posts on the subject 
> will testify.
> 
>>  In view of this development, I'm
>> not going to do anything right now. AFAICT, Jay's arptables is still a
>> subset of ebtables and I think that the best long-term strategy for
>> Shorewall is to support ebtables. That isn't a small project and will
>> require several months to bring to fruition.
>>   
> Seems like a wise move.
> 

I took another look at ebtables this morning and it doesn't seem to
support changing the source or destination IP address. I have a
requirement for that on my own firewall where I have the following in my
/etc/shorewall/init file:

if ! arptables -L -n -v | fgrep -q '10.1.10.11'; then
   arptables -A OUTPUT -o eth1 -d 10.1.10.0/24 -j mangle \
      --mangle-ip-s 10.1.10.11
fi

So I guess that I will go ahead and add support for both flavors of
arptables.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnmore_122712
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to