Project

General

Profile

IPTables » History » Version 6

Version 5 (Laurent GUERBY, 04/05/2012 09:23 AM) → Version 6/31 (Laurent GUERBY, 04/21/2012 05:28 PM)

{{>toc}}

h1. IPTables

* http://www.bortzmeyer.org/dns-netfilter-u32.html
* http://www.stearns.org/doc/iptables-u32.current.html
* http://ebtables.sourceforge.net/br_fw_ia/PacketFlow.png
* http://ebtables.sourceforge.net/
* http://www.inetdoc.net/guides/iptables-tutorial/traversingoftables.html


DHCP ?
sysctl -w net.bridge.bridge-nf-call-iptables=1
sysctl -w net.bridge.bridge-nf-call-ip6tables=1
iptables -A INPUT -p udp --sport 68 --dport 67 -j DROP

https://bugzilla.redhat.com/show_bug.cgi?id=512206

h1. ebtables

* http://serverfault.com/questions/284290/two-dhcp-servers-block-clients-for-one-of-them

ebtables -A INPUT --in-interface br0 --protocol ipv4 --ip-protocol udp --ip-source-port 67:68 -j DROP
ebtables -A INPUT --in-interface br0 --protocol ipv4 --ip-protocol udp --ip-destination-port 67:68 -j DROP
ebtables -A FORWARD --in-interface br0 --protocol ipv4 --ip-protocol udp --ip-destination-port 67:68 -j DROP
ebtables -A FORWARD --in-interface br0 --protocol ipv4 --ip-protocol udp --ip-source-port 67:68 -j DROP