mac dest match
shurdeek at routehat.org
Wed Jan 5 22:18:30 CET 2005
On Wed, Jan 05, 2005 at 01:18:43PM -0600, Vivek raghunathan wrote:
> Hi all.
> I have 3 nodes A, B, C on the same subnet and I would like to create a
> line topology:
> A -> B -> C
> To do this, I need to prevent any MAC packet from A to C from getting
> across and vice versa.
I think it would be easier to use separate subnets and deactivate sending icmp
source redirects on "B". No need to play with iptables.
Assuming the network device is always eth0, you'd do something like:
A: ip addr add 192.168.0.1/30 dev eth0
B: ip addr add 192.168.0.2/30 dev eth0;ip addr add 192.268.0.6/30 dev eth0
C: ip addr add 192.168.0.5/30 dev eth0
echo 0 > /proc/sys/net/ipv4/conf/eth0/send_redirects
Peter Surda (Shurdeek) <shurdeek at routehat.org>, ICQ 10236103, +436505122023
Hello, this is Bill Gates and I pronounce Monopoly, er, Windows as Windows.
More information about the netfilter-devel