IPTables » Historique » Version 5
Laurent GUERBY, 05/04/2012 09:23
| 1 | 1 | Laurent GUERBY | {{>toc}} |
|---|---|---|---|
| 2 | 1 | Laurent GUERBY | |
| 3 | 1 | Laurent GUERBY | h1. IPTables |
| 4 | 1 | Laurent GUERBY | |
| 5 | 1 | Laurent GUERBY | * http://www.bortzmeyer.org/dns-netfilter-u32.html |
| 6 | 1 | Laurent GUERBY | * http://www.stearns.org/doc/iptables-u32.current.html |
| 7 | 1 | Laurent GUERBY | * http://ebtables.sourceforge.net/br_fw_ia/PacketFlow.png |
| 8 | 1 | Laurent GUERBY | * http://ebtables.sourceforge.net/ |
| 9 | 2 | Laurent GUERBY | |
| 10 | 2 | Laurent GUERBY | DHCP ? |
| 11 | 3 | Laurent GUERBY | sysctl -w net.bridge.bridge-nf-call-iptables=1 |
| 12 | 3 | Laurent GUERBY | sysctl -w net.bridge.bridge-nf-call-ip6tables=1 |
| 13 | 3 | Laurent GUERBY | iptables -A INPUT -p udp --sport 68 --dport 67 -j DROP |
| 14 | 2 | Laurent GUERBY | |
| 15 | 4 | Laurent GUERBY | https://bugzilla.redhat.com/show_bug.cgi?id=512206 |
| 16 | 4 | Laurent GUERBY | |
| 17 | 2 | Laurent GUERBY | h1. ebtables |
| 18 | 2 | Laurent GUERBY | |
| 19 | 2 | Laurent GUERBY | * http://serverfault.com/questions/284290/two-dhcp-servers-block-clients-for-one-of-them |
| 20 | 5 | Laurent GUERBY | |
| 21 | 5 | Laurent GUERBY | ebtables -A INPUT --in-interface br0 --protocol ipv4 --ip-protocol udp --ip-source-port 67:68 -j DROP |
| 22 | 5 | Laurent GUERBY | ebtables -A INPUT --in-interface br0 --protocol ipv4 --ip-protocol udp --ip-destination-port 67:68 -j DROP |
| 23 | 5 | Laurent GUERBY | ebtables -A FORWARD --in-interface br0 --protocol ipv4 --ip-protocol udp --ip-destination-port 67:68 -j DROP |
| 24 | 5 | Laurent GUERBY | ebtables -A FORWARD --in-interface br0 --protocol ipv4 --ip-protocol udp --ip-source-port 67:68 -j DROP |