Re: About ebtables

Op za, 10-12-2005 te 05:52 +0000, schreef André Zúquete:
> Hi!
> 
> I'm trying to use ebtables and the ulog watcher to make a L2 wrapper for
> dealing with ARP, DHCP, etc.
> Currently I'm using Ubuntu 5.10, Kernel 2.6.12-10, the latest version,
> and downloaded the source version of ebtables 2.0.8-rc1.
> It compiled without any problems.
> 
> Then I ran the following commands:
> 
> ebtables -I INPUT --ulog-nlgroup 5
> test_ulog 5
> 
> After I ran ping from another machine into the machine that is running
> ebtables/test_ulog but noting happen. Why?
> 
> The contents of /proc/net/netlink are:
> 
> sk       Eth Pid    Groups   Rmem     Wmem     Dump     Locks
> cb9c8200 0   0      00000000 0        0        00000000 2
> c7602a00 5   32528  00000010 0        0        00000000 2
> c69bf800 5   0      00000000 0        0        00000000 2
> cbe3e200 7   0      00000000 0        0        00000000 2
> cbe4e800 9   0      00000000 0        0        00000000 2
> cb9c8000 15  0      00000000 0        0        00000000 2
> cb853e00 15  3050   ffffffff 0        0        00000000 2
> cb93c600 15  6138   ffffffff 0        0        00000000 2
> 
> Do you have any clue about what is wrong for not getting anything with
> ebtables and test_ulog?

As already answered in private mail, this makes it work:
#brctl addbr br0
#brctl addif br0 eth0
#ifconfig br0 up
#ebtables -t broute -I BROUTING --ulog-nlgroup 5 -j DROP

cheers,
Bart




-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_idv37&alloc_id865&op=click