Re: [Ebtables-user] mixed use of ebtables/iptables

Op do, 17-02-2005 te 11:52 -0800, schreef tony vong: 
> bash# ebtables -t broute -i eth0 -A BROUTING -p IPv4
> --ip-protocol 6 --ip-destination-port 80 -j redirect
> --redirect-target ACCEPT
> 
> bash# iptables -t nat -A PREROUTING -i br0 -p tcp
> --dport 80 -j REDIRECT --to-port 3128
> 
> If I am correct, the two statements above should only
> direct http traffic coming in from eth0 to IP layer.
> In other words, ip tables logging should not display
> http traffic coming in from eth1. But I am still
> seeing, in the iptables logging file, http traffic
> that arrives from from eth1!

What is your logging rule?
Your rules do not say anything about dropping packets.

What you probably want is something like this:

ebtables -t nat -A PREROUTING -i eth0 -p IPv4 --ip-destination-port 80 -j redurect --redirect-target ACCEPT
ebtables -t nat -A PREROUTING -p IPv4 -j DROP
iptables -t nat -A PREROUTING -i br0 -p tcp --dport 80 -j REDIRECT --to-port 3128

cheers,
Bart

PS: in the future, please direct these kind of questions only to the
ebtables-user mailing list.




-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click