Projet

Général

Profil

IPTables » Historique » Version 5

Laurent GUERBY, 05/04/2012 09:23

1 1 Laurent GUERBY
{{>toc}}
2 1 Laurent GUERBY
3 1 Laurent GUERBY
h1. IPTables
4 1 Laurent GUERBY
5 1 Laurent GUERBY
* http://www.bortzmeyer.org/dns-netfilter-u32.html
6 1 Laurent GUERBY
* http://www.stearns.org/doc/iptables-u32.current.html
7 1 Laurent GUERBY
* http://ebtables.sourceforge.net/br_fw_ia/PacketFlow.png
8 1 Laurent GUERBY
* http://ebtables.sourceforge.net/
9 2 Laurent GUERBY
10 2 Laurent GUERBY
DHCP ?
11 3 Laurent GUERBY
sysctl -w net.bridge.bridge-nf-call-iptables=1 
12 3 Laurent GUERBY
sysctl -w net.bridge.bridge-nf-call-ip6tables=1 
13 3 Laurent GUERBY
iptables -A INPUT -p udp --sport 68 --dport 67 -j DROP
14 2 Laurent GUERBY
15 4 Laurent GUERBY
https://bugzilla.redhat.com/show_bug.cgi?id=512206
16 4 Laurent GUERBY
17 2 Laurent GUERBY
h1. ebtables
18 2 Laurent GUERBY
19 2 Laurent GUERBY
* http://serverfault.com/questions/284290/two-dhcp-servers-block-clients-for-one-of-them
20 5 Laurent GUERBY
21 5 Laurent GUERBY
ebtables -A INPUT --in-interface br0 --protocol ipv4 --ip-protocol udp --ip-source-port 67:68 -j DROP
22 5 Laurent GUERBY
ebtables -A INPUT --in-interface br0 --protocol ipv4 --ip-protocol udp --ip-destination-port 67:68 -j DROP
23 5 Laurent GUERBY
ebtables -A FORWARD --in-interface br0 --protocol ipv4 --ip-protocol udp --ip-destination-port 67:68 -j DROP
24 5 Laurent GUERBY
ebtables -A FORWARD --in-interface br0 --protocol ipv4 --ip-protocol udp --ip-source-port 67:68 -j DROP