Re: Vlans

Op wo, 18-10-2006 te 20:01 +0200, schreef Lutz Jaenicke:
> The ebtables components (those configured with the ebtables command)
> can be used to filter for VLAN tags. The ebtables specific protocol
> matchers for arp, ip, etc are not transparent wrt VLAN: they will
> not match VLAN encapsulated traffic. Note: I do have an extension
> patch to provide this support (configurable) for some really old
> version of ebtables (for kernel 2.4 with br-nf patch) that is due
> to be ported to 2.6.18+ in the next days anyway.
> I can send it to the list for discussion/inclusion as soon as the
> porting is done if there is interest...

That would be interesting, thanks. I was thinking about a userspace flag
like --vlan-encapsulated to let the user specify she wants to filter the
ip/arp/etc stuff inside the vlan package. The kernel logic best resides
inside the specific matches/targets, shouldn't be too messy.

cheers,
Bart



-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642