[Bug 1674] ebtables causing packet loss
bugzilla-daemon at netfilter.org
bugzilla-daemon at netfilter.org
Wed Apr 26 09:59:56 CEST 2023
https://bugzilla.netfilter.org/show_bug.cgi?id=1674
--- Comment #2 from ryder1ross at gmail.com ---
Where can I report the issue if this is not the place ?
ebtables-restore is not in use.
I am applying these rules on host node to avoid IP spoofing on the VPS :
------------------------------------------------------------------------------
ebtables -L 'v1001'
ebtables -L 'v1001IPV6'
ebtables -L 'v1001ARPIN'
ebtables -L 'v1001'
ebtables -L 'v1001IPV6'
ebtables -L 'v1001ARPIN'
ebtables -N 'v1001'
ebtables -P 'v1001' DROP
ebtables -N 'v1001IPV6'
ebtables -P 'v1001IPV6' DROP
ebtables -N 'v1001'ARPIN
ebtables -A FORWARD -p IPv4 -i 'vifv1001' -j 'v1001'
ebtables -A INPUT -p ARP -i 'vifv1001' -j 'v1001'ARPIN
ebtables -A FORWARD -p ARP -i 'vifv1001' -j 'v1001'ARPIN
ebtables -A FORWARD -p IPv4 -i 'vinfv1001' -j 'v1001'
ebtables -A INPUT -p ARP -i 'vinfv1001' -j 'v1001'ARPIN
ebtables -A FORWARD -p ARP -i 'vinfv1001' -j 'v1001'ARPIN
ebtables -A FORWARD -p IPv6 -i 'vifv1001' -j 'v1001IPV6'
ebtables -A 'v1001' -p IPv4 --ip-src '192.168.122.204' -s '00:xx:xx:52:69:ac'
-j ACCEPT
ebtables -A 'v1001'ARPIN -p ARP --arp-ip-src '192.168.122.204' --arp-mac-src
'00:xx:xx:52:69:ac' -j ACCEPT
ebtables -A 'v1001'ARPIN -p ARP -j DROP
------------------------------------------------------------------------------
and then save after adding these rules for every VPS.
ebtables-save
--
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20230426/984a0117/attachment.html>
More information about the netfilter-buglog
mailing list