Re: Bridge Transparent Proxy

[Pascal Hambourg <pascal.mail@plouf.fr.eu.org>]

Hello,

Robert LeBlanc a écrit :
> You will need to look at ebtables. Bridging will bypass iptables.
Bridged IPv4 packets traverse the iptables chains if the kernel was 
compiled with Netfilter bridge support (CONFIG_BRIDGE_NETFILTER=y). It 
allows finer filtering than ebtables, for instance accepting only 
outgoing HTTP/HTTPS connections and related ICMP messages in both 
directions thanks to connection tracking, e.g. :
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -m physdev --physdev-in eth1 -m state --state NEW \
  -p tcp -m multiport --dports 80,443 -j ACCEPT