Re: Bridging and DMZ

Op do, 06-09-2007 te 07:36 +0000, schreef Ludovic MARCILLY:
> Hi all,
> 
> i have a linux box with three ethernet card. I want to bridge eth0 with eth2 and to have eth1 like a DMZ.
> 
> Before, i was using linux-2.4.27 with iptables-1.2.11 and bridge patch. It was working very weel.
> 
> Now, i have updating my kernel to 2.6.21.5 and iptables to version 1.3.7 and it does not work anymore.
> 
> In my /var/log/message i can read some :
> 
> kernel: physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
> 
> What does it means ? I can't do what i want with iptables? I must use ebtables ?

Yes, the netfilter folks chose to remove that capability because it made
things too complicated in the kernel. What will probably solve your
problem is marking those routed packets in iptables and then doing what
you want in ebtables (when the packets have the correct mark).

cheers,
Bart



-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/