Arch Linux

n00bz

Member

Registered: 2010-03-07

Posts: 3

bridging and ip rule?

Hello, i'm having a bit of a problem. I had setup an ethernet bridge on my home server with, so that i can plug laptop into server spare port (eth0)... 
After playing a bit with ip rule i had noticed, that it really doesn't have nothing much effect on whatever goes trough the box.

:: ~# ifconfig
br0       Link encap:Ethernet  HWaddr 00:11:6B:97:34:A9
          inet addr:192.168.2.150  Bcast:192.168.2.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:7651 errors:0 dropped:0 overruns:0 frame:0
          TX packets:12410 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:513539 (501.5 Kb)  TX bytes:14534228 (13.8 Mb)

eth0      Link encap:Ethernet  HWaddr 00:12:34:56:78:9A
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:13 errors:0 dropped:0 overruns:0 frame:0
          TX packets:16 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:1160 (1.1 Kb)  TX bytes:1304 (1.2 Kb)
          Interrupt:22 Base address:0x6000

eth1      Link encap:Ethernet  HWaddr 00:11:6B:97:34:A9
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:7656 errors:0 dropped:0 overruns:0 frame:0
          TX packets:12423 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:621019 (606.4 Kb)  TX bytes:14535712 (13.8 Mb)
          Interrupt:17 Base address:0xe000

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:511 errors:0 dropped:0 overruns:0 frame:0
          TX packets:511 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:71016 (69.3 Kb)  TX bytes:71016 (69.3 Kb)

:: ~# brctl show
bridge name     bridge id               STP enabled     interfaces
br0             8000.00116b9734a9       no              eth0
                                                        eth1

+--------------+        +-------------------+             +----------------+
| Laptop       |    eth0| Server            |eth1         |  Firewall      | wlan0 (to router, proxy arp)
| 192.168.2.25 |<------>| 192.168.2.150     |<----------->|  192.168.2.175 |<--------------------------...
+--------------+        +-------------------+             +----------------+

For example if i say on server...
ip rule from 192.168.2.25 prohibit
i can still ping my gateway from laptop, or any other host (google for instance).
However applying same rule on my firewall instantly drops all traffic from my laptop.

All of them (laptop, server and firewall) runs on same kernel, arch stock.

Am i missing something? Can someone give me some insight?

tomk

Forum Fellow

From: Ireland

Registered: 2004-07-21

Posts: 9,839

Re: bridging and ip rule?

The server is operating as an ethernet bridge between the laptop and the firewall, and is therefore completely unconcerned about ip traffic.

n00bz

Member

Registered: 2010-03-07

Posts: 3

Re: bridging and ip rule?

Of course!
*bangs with head in wall*

Thanks, just saved me some nervs. :-)