Re: please help me with ebtables, i need to block arp replys

"mikis stepan" <[email protected]> Tue, 19 Aug 2008 20:23:44 -0500
Newsgroups gmane.linux.network.bridge.ebtables.user
Message-ID <[email protected]>
--===============1278110470==
Content-Type: multipart/alternative; 
	boundary="----=_Part_14381_9749506.1219195424155"

------=_Part_14381_9749506.1219195424155
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hi, thanks for your fast reply. What i really want to do is the second
scenario, i just have the linksys wrtsl54gs which is a router/switch and to
that router are connected 3 computers, computer A, computer B and computer
C, computer A is the machine that responses the arp request that are made in
the lan, and i want that only those replys be allowed by the linksys. For
example, if computer B makes an arp request to computer C, computer C will
send his reply, but i want a rule that drop that reply in the router, at the
same time computer A will answer that request, but his reply will be allowed
by the router, and that reply will go to computer B. The program that makes
the arp replys, in each arp reply packet, in the ethernet header, in the
source mac address field, puts the mac address of computer A, every arp
replys has computers A mac address in ethernet header in mac source adddress
field, and thats the criterio that i want to use to decide if the arp reply
is allowed. I want to know if i can do this with ebtables, i want to know
which table and chain could help me with this. I know that the mac address
of computer A could be used by another machine in the lan, and those replys
could be accepted too, but thats another problem that i will resolve later.
I just need a rule in the linksys that will check the arp replys and if the
arp replys comes from computer A, then accept, if not, then drop. Thats what
i need and i want to know if this is possible with ebtables?? Sorry for my
english. Thanks a lot for your help in advance.

------=_Part_14381_9749506.1219195424155
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

<div dir=3D"ltr">Hi, thanks for your fast reply. What i really want to do i=
s the second scenario, i just have the linksys wrtsl54gs which is a router/=
switch and to that router are connected 3 computers, computer A, computer B=
 and computer C, computer A is the machine that responses the arp request t=
hat are made in the lan, and i want that only those replys be allowed by th=
e linksys. For example, if computer B makes an arp request to computer C, c=
omputer C will send his reply, but i want a rule that drop that reply in th=
e router, at the same time computer A will answer that request, but his rep=
ly will be allowed by the router, and that reply will go to computer B. The=
 program that makes the arp replys, in each arp reply packet, in the ethern=
et header, in the source mac address field, puts the mac address of compute=
r A, every arp replys has computers A mac address in ethernet header in mac=
 source adddress field, and thats the criterio that i want to use to decide=
 if the arp reply is allowed. I want to know if i can do this with ebtables=
, i want to know which table and chain could help me with this. I know that=
 the mac address of computer A could be used by another machine in the lan,=
 and those replys could be accepted too, but thats another problem that i w=
ill resolve later. I just need a rule in the linksys that will check the ar=
p replys and if the arp replys comes from computer A, then accept, if not, =
then drop. Thats what i need and i want to know if this is possible with eb=
tables?? Sorry for my english. Thanks a lot for your help in advance.<br>

</div>

------=_Part_14381_9749506.1219195424155--


--===============1278110470==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
--===============1278110470==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Ebtables-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ebtables-user

--===============1278110470==--