in arptable rules not [!] rule with interface is not working
"pankaj jain" <[email protected]> Tue, 14 Aug 2007 14:20:26 +0530
| Newsgroups | gmane.linux.network.bridge.ebtables.user |
|---|---|
| Message-ID | <[email protected]> |
Hi, I was trying to drop arp packets such that only specific interface should answer the arp requests. I added following rules in input chain. -j DROP -i !eth1 -o * -d 10.19.1.102 --opcode 1 , pcnt=0 -- bcnt=0 -j DROP -i !eth2 -o * -d 10.19.51.102 --opcode 1 , pcnt=0 -- bcnt=0 To create these rules I used following commands arptables -A INPUT -i '!eth1' --opcode Request -d 10.19.1.102 -j DROP arptables -A INPUT -i '!eth2' --opcode Request -d 10.19.51.102 -j DROP as packet count suggests these are not matching against any packets. when I do arping from other machine to the 10.19.1.102 (assigned to the eth1 interface) arp requests are responded from eth0 (ip-10.19.0.102). why the rules are not having any effect. -- Thanks Pankaj Jain ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/