[Bug 1674] ebtables causing packet loss

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Wed Apr 26 09:59:56 CEST 2023


https://bugzilla.netfilter.org/show_bug.cgi?id=1674

--- Comment #2 from ryder1ross at gmail.com ---
Where can I report the issue if this is not the place ?


ebtables-restore is not in use.
I am applying these rules on host node to avoid IP spoofing on the VPS :

------------------------------------------------------------------------------
ebtables -L 'v1001' 

ebtables -L 'v1001IPV6' 

ebtables -L 'v1001ARPIN' 

ebtables -L 'v1001' 

ebtables -L 'v1001IPV6' 

ebtables -L 'v1001ARPIN' 

ebtables -N 'v1001' 

ebtables -P 'v1001' DROP 

ebtables -N 'v1001IPV6' 

ebtables -P 'v1001IPV6' DROP 

 ebtables -N 'v1001'ARPIN 

 ebtables -A FORWARD -p IPv4 -i 'vifv1001' -j 'v1001' 

ebtables -A INPUT -p ARP -i 'vifv1001' -j 'v1001'ARPIN 

 ebtables -A FORWARD -p ARP -i 'vifv1001' -j 'v1001'ARPIN 

 ebtables -A FORWARD -p IPv4 -i 'vinfv1001' -j 'v1001' 

ebtables -A INPUT -p ARP -i 'vinfv1001' -j 'v1001'ARPIN 

ebtables -A FORWARD -p ARP -i 'vinfv1001' -j 'v1001'ARPIN 

 ebtables -A FORWARD -p IPv6 -i 'vifv1001' -j 'v1001IPV6' 

ebtables -A 'v1001' -p IPv4 --ip-src '192.168.122.204' -s '00:xx:xx:52:69:ac'
-j ACCEPT 

 ebtables -A 'v1001'ARPIN -p ARP --arp-ip-src '192.168.122.204' --arp-mac-src
'00:xx:xx:52:69:ac' -j ACCEPT 

 ebtables -A 'v1001'ARPIN -p ARP -j DROP 
------------------------------------------------------------------------------
and then save after adding these rules for every VPS.

ebtables-save

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20230426/984a0117/attachment.html>


More information about the netfilter-buglog mailing list