RE: Questions about ebtables
ramsurrunv-aD7nsNzqxXzCK/[email protected]
| Newsgroups | gmane.linux.network.bridge.ebtables.user |
|---|---|
| Message-ID | <[email protected]> |
> Hi Visham, > > Thanks for your answer. > >>> - Can I filter IPX and Netbeui with ebtables on this network layout? >> >>I'm not sure of this one..I think i read that it is possible.I'll check.. > > Could you check if ebtables can work on a gateway rather than on a bridge? > Yes it can work..it's simply a filtering tool like iptables..u can set up LAyer 2 firewall using only ebtables rule..no need to create a bridge. > Somewhere I read that IPX/Netbeui packets cannot be forwarded by a router, > unless over a tunnel. So this means that to use ebtables for IPX/Netbeui > filtering I should create a tunnel, like a linux bridge. > > What do you think? Is this correct? > For this i'm not sure..i'll have to check and didn't manage to do it..i believe you must check the member protocols that fall under the "ipv4" keyword that is used in ebtables. If it's not there, then you must add support for it by means of a module..i believe it's like the helper modules that you have for connection tracking in iptables, that handle specific protocols like FTP. > The thing is, I have 5 LANs , each one of them with a Windows server. And > each Windows server connected to a Linux server which acts for them as > Internet gateway. It´s somehow difficult for me to create several bridges > and install each one of them between the LAN servers and the Linux server, > so I thought perhaps something could be done on the Linux server to filter > this, and with that, filter Windows' File sharing between LANs. > > So far I filter with iptables TCP/UDP packets for ports that File sharing > uses (137-139,445) but I still can see the other LANs even with those > ports > filtered. > > Thanks! > > Edo > > ------------------------------------------------------- SF.Net email is Sponsored by the Better Software Conference & EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf