LARTC
[Top] [All Lists]

Re: [LARTC] Disable netfilter for bridged traffic

To: senthil <senthil@multitech.co.in>
Subject: Re: [LARTC] Disable netfilter for bridged traffic
From: Radu Oprisan <radu@securesystems.ro>
Date: Sat, 06 Jan 2007 20:30:55 +0200
Cc: lartc@mailman.ds9a.nl
Delivered-to: sp-com-lists@consult.net
Delivered-to: lartc-list@securepoint.com
Delivered-to: lartc@outpost.ds9a.nl
In-reply-to: <4588D088.3050702@multitech.co.in>
List-archive: <http://mailman.ds9a.nl/pipermail/lartc>
List-help: <mailto:lartc-request@mailman.ds9a.nl?subject=help>
List-id: "Mailinglist of the Linux Advanced Routing &amp; Traffic Control project" <lartc.mailman.ds9a.nl>
List-post: <mailto:lartc@mailman.ds9a.nl>
List-subscribe: <http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc>, <mailto:lartc-request@mailman.ds9a.nl?subject=subscribe>
List-unsubscribe: <http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc>, <mailto:lartc-request@mailman.ds9a.nl?subject=unsubscribe>
References: <4588D088.3050702@multitech.co.in>
Sender: lartc-bounces@mailman.ds9a.nl
User-agent: Thunderbird 1.5.0.9 (Windows/20061207)
senthil wrote:
> Hi All,
> Can anybody suggests how can I disable netfilter for bridged traffic in
> linux-2.4.27 kernel ?

If i understand the question, then you just need to ignore the
interfaces for the bridge.

iptables -I FORWARD -i eth_bridge_1 -j RETURN
iptables -I FORWARD -i eth_bridge_2 -j RETURN
iptables -I FORWARD -i bridge -j RETURN

same for input and output if you don't need a firewall for the ip
address assigned on the bridge interface or you don't have an ip address
assigned.
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

<Prev in Thread] Current Thread [Next in Thread>