Ebtables Problem

kamran arshad <uetian1707-/[email protected]> Thu, 22 Nov 2007 01:29:35 -0800 (PST)
Newsgroups gmane.linux.network.bridge.ebtables.user
Message-ID <[email protected]>
I have Installed Ebtables on a Fedora Core 4 Machine with Ethernet Bridging enabled. The bridge commands are as:
  # ifconfig eth2   0.0.0.0
 # ifconfig eth3  0.0.0.0
 # brctl addbr test
 # brctl addif test eth2
 # brctl addif test eth3 
 # ifconfig test up
  The Linux bridge is working fine and I am able to pass the RDP, FTP, ICMP as well as http traffic through this bridge without any problem. The problem is that the ebtables commands which I enter donn seem to work. I have installed Ebtables through source and the commands I entered are:
  #ebtables -P FORWARD DROP
#ebtables -A FORWARD -p IPv4 -j ACCEPT
#ebtables -A FORWARD -p ARP -j ACCEPT
#ebtables -A FORWARD -p Length -j ACCEPT
#ebtables -A FORWARD --log-level 1 --log-prefix "EBFW" --log-ip 
  #ebtables -P INPUT DROP
#ebtables -A INPUT -p IPv4 -j ACCEPT
#ebtables -A INPUT -p ARP -j ACCEPT
#ebtables -A INPUT -p Length -j ACCEPT
#ebtables -A INPUT --log-level 1 --log-prefix "EBFW" --log-ip 
  #ebtables -P OUTPUT DROP
#ebtables -A OUTPUT -p IPv4 -j ACCEPT
#ebtables -A OUTPUT -p ARP -j ACCEPT
#ebtables -A OUTPUT -p Length -j ACCEPT
#ebtables -A OUTPUT --log-level 1 --log-prefix "EBFW" --log-ip --log-arp -j DROP
  The log watcher logs the traffic in syslog, and I am not able to see it. So precisely my questions are:
  1- In which file can I see the packets logged by ebtables using the above script? I have checked /var/log/messages  and /var/log/dmesg files. There is nothing logged their.
  2- I have put all the commands directly on the shell. Do you have to write these commands in some other file? 
  3- Through the "ebtables-save" script I can see which commands I entered but when I restart the ebtables service all these commands disappear. How can I save my script?


Kamran Arshad
  
Network Engineer 
  
  Signals R&D Establishment Military College Signals.
  
Adayala Road, Rawalpindi Pakistan
  
  Cell No. +92-333-515-5857
  
  
       
---------------------------------
Be a better sports nut! Let your teams follow you with Yahoo Mobile. Try it now.

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

_______________________________________________
Ebtables-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ebtables-user