Re: ebtables & iptables

Nick Fedchik <nick-UvdXiu2sajOKBXSJ/[email protected]>
Newsgroups gmane.linux.network.bridge.ebtables.user
Message-ID <[email protected]>
> 1\if I used ebtables process a package,but need iptables can't process THIS
> package,how can I do? 
Did You mean 'packet' instead of 'package'?
Just flush all iptables rules

> 2\i read the etables man page,in this: 
>   -p, --protocol [!] protocol
>      The protocol that was responsible for creating the frame. This can be
> a hexadecimal number, above 0x0600, a name (e.g. ARP ) or LENGTH. The
> protocol field of the Ethernet frame can be used to denote the length of
> the header (802.2/802.3 networks).
> how can I match the package LENGTH? can I mach : if the package > 128K then
> DROP?
This is an Ethernet  frame length field for 802.2/802.3 frames.
The same field uset to set up L3 protocol type for Ethernet-II frames.
Anyway the Ethernet frame length limited to 1536 octets.
RTFM http://www.techfest.com/networking/lan/ethernet2.htm

-- 
Best regards, Nick Fedchik


-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.