Re: Hiding an IP address on a multi-homed bridging firewall!!

Try simply locking down your  ARP traffic for that interface eth2.
Any arp request with that interfaces IP or MAC .. drop them if they
are not going out the interface itself.

ebtables -A OUTPUT -p ARP -s eth2MACaddress -o ! eth2 -j DROP

Although if eth2 is truely a management interface, I'd lock it down
even further with

ebtables -A OUTPUT  -o ! eth2 -s eth2MACaddress -j DROP

That'd limit outbound traffic with eth2's MAC to only going out eth2.

J Kane

On Wed, Jul 2, 2008 at 10:19 PM, Ramsurrun Visham <[email protected]> wrote:
> Hi to all,
>
> I have a machine acting as a stealth firewall with three interfaces.
> Only interfaces eth0 and eth1 are enslaved to the bridge device br0,
> and none of them are given IP addresses. eth2 connects to a different
> network and has an IP address assigned to it. Traffic travels from
> eth0 to eth1 and vice-versa. I wanted to know how can I make computers
> found on the eth0 and eth1 sides of the bridge, not see the eth2 IP
> address. The problem is that I sometimes see ARP requests with the
> eth2's IP address as src IP address. When I disable the eth2
> interface, I get ARP requests with src IP address 0.0.0.0, which is
> fine. But when eth2 is up, I see its IP address. How can I hide it?
>
> Any help will be much appreciated..
>
> Warm regards,
> Visham
>
> -------------------------------------------------------------------------
> Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
> Studies have shown that voting for your favorite open source project,
> along with a healthy diet, reduces your potential for chronic lameness
> and boredom. Vote Now at http://www.sourceforge.net/community/cca08
> _______________________________________________
> Ebtables-user mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/ebtables-user
>

-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08