Re: please help me with ebtables, i need to block arp replys
"mikis stepan" <[email protected]> Tue, 19 Aug 2008 20:23:44 -0500
| Newsgroups | gmane.linux.network.bridge.ebtables.user |
|---|---|
| Message-ID | <[email protected]> |
--===============1278110470== Content-Type: multipart/alternative; boundary="----=_Part_14381_9749506.1219195424155" ------=_Part_14381_9749506.1219195424155 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline Hi, thanks for your fast reply. What i really want to do is the second scenario, i just have the linksys wrtsl54gs which is a router/switch and to that router are connected 3 computers, computer A, computer B and computer C, computer A is the machine that responses the arp request that are made in the lan, and i want that only those replys be allowed by the linksys. For example, if computer B makes an arp request to computer C, computer C will send his reply, but i want a rule that drop that reply in the router, at the same time computer A will answer that request, but his reply will be allowed by the router, and that reply will go to computer B. The program that makes the arp replys, in each arp reply packet, in the ethernet header, in the source mac address field, puts the mac address of computer A, every arp replys has computers A mac address in ethernet header in mac source adddress field, and thats the criterio that i want to use to decide if the arp reply is allowed. I want to know if i can do this with ebtables, i want to know which table and chain could help me with this. I know that the mac address of computer A could be used by another machine in the lan, and those replys could be accepted too, but thats another problem that i will resolve later. I just need a rule in the linksys that will check the arp replys and if the arp replys comes from computer A, then accept, if not, then drop. Thats what i need and i want to know if this is possible with ebtables?? Sorry for my english. Thanks a lot for your help in advance. ------=_Part_14381_9749506.1219195424155 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline <div dir=3D"ltr">Hi, thanks for your fast reply. What i really want to do i= s the second scenario, i just have the linksys wrtsl54gs which is a router/= switch and to that router are connected 3 computers, computer A, computer B= and computer C, computer A is the machine that responses the arp request t= hat are made in the lan, and i want that only those replys be allowed by th= e linksys. For example, if computer B makes an arp request to computer C, c= omputer C will send his reply, but i want a rule that drop that reply in th= e router, at the same time computer A will answer that request, but his rep= ly will be allowed by the router, and that reply will go to computer B. The= program that makes the arp replys, in each arp reply packet, in the ethern= et header, in the source mac address field, puts the mac address of compute= r A, every arp replys has computers A mac address in ethernet header in mac= source adddress field, and thats the criterio that i want to use to decide= if the arp reply is allowed. I want to know if i can do this with ebtables= , i want to know which table and chain could help me with this. I know that= the mac address of computer A could be used by another machine in the lan,= and those replys could be accepted too, but thats another problem that i w= ill resolve later. I just need a rule in the linksys that will check the ar= p replys and if the arp replys comes from computer A, then accept, if not, = then drop. Thats what i need and i want to know if this is possible with eb= tables?? Sorry for my english. Thanks a lot for your help in advance.<br> </div> ------=_Part_14381_9749506.1219195424155-- --===============1278110470== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ --===============1278110470== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Ebtables-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/ebtables-user --===============1278110470==--