Re: problem in ebtables '-i' option

Thanks for the replying. I am going to try out later.

But would you tell me the difference between the
effects of the following two statements ? As far as I
understand, they should be same because the first
rewrites the mac address to the bridge's address and
thus the frame will be sent to IP stack. The second
one "DROP's" the frame and again, the frame will be
BROUTEd, in which case, the frame will also be sent to
IP stack.

1.)
btables -t broute -i eth0 -A BROUTING -p IPv4
--ip-protocol 6 --ip-destination-port 80 -j redirect
--redirect-target ACCEPT

2.)
btables -t broute -i eth0 -A BROUTING -p IPv4
--ip-protocol 6 --ip-destination-port 80 -j DROP



--- melter <[email protected]
--- melter <[email protected]> wrote:

> Hi!
> 
> I don't know is it bug or not, but change the
> 
> -i eth0
> 
> with
> 
> -m physdev --physdev-in eth0
> 
> or
> 
> -m physdev --physdev-out eth0
> 
> 
> 
> tony vong wrote:
> > Hi My linux box has two ports eth0 and eth1. I
> have
> > already configured br0 and added eth0 and eth1 to
> br0.
> > I want to redirec http traffic coming in from eth0
> to
> > the upper layer ip code. So I used the following
> two
> > commands:
> > 
> > 
> > bash# ebtables -t broute -i eth0 -A BROUTING -p
> IPv4
> > --ip-protocol 6 --ip-destination-port 80 -j
> redirect
> > --redirect-target ACCEPT
> > 
> > bash# iptables -t nat -A PREROUTING -i br0 -p tcp
> > --dport 80 -j REDIRECT --to-port 3128
> > 
> > However, I noticed that the http traffic coming in
> > from eth1 also got redirected to upper layer IP
> code.
> > 
> > Is this a bug or what ?
> > 
> > 
> > 
> > __________________________________________________
> > Do You Yahoo!?
> > Tired of spam?  Yahoo! Mail has the best spam
> protection around 
> > http://mail.yahoo.com 
> > 
> > 
> >
>
-------------------------------------------------------
> > SF email is sponsored by - The IT Product Guide
> > Read honest & candid reviews on hundreds of IT
> Products from real users.
> > Discover which products truly live up to the hype.
> Start reading now.
> >
>
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
> > _______________________________________________
> > Ebtables-devel mailing list
> > [email protected]
> >
>
https://lists.sourceforge.net/lists/listinfo/ebtables-devel
> > 
> > 
> 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click