Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What rule(s) are needed to allow ucarp traffic on IPTables?

share|improve this question
up vote 2 down vote accepted

I'm assuming you're talking about the advertisment packets between ucarp hosts. I haven't used ucarp, but a quick examination of the source makes me think that it's listening via libpcap such that it will be effectively immune to filtering by iptables.

The carp_send_ad() function in carp.c seems to be where the advertisment packets are sourced from. I'm seeing the code putting together a multicast or broadcast ethernet frame (depending on the no_mcast boolean) with the CARP advertisment inside it. The source IP appears to be the source ip specified on the command-line and the destination IP appears to be the the multicast address As such, you could filter for these source and destination addresses on the INPUT chain, but I think you're going to find that there's no need to worry about it since the packets are being slurped off the wire with libpcap anyway.

(It would be nice if the rain here would let up a bit so that I wasn't sitting inside playing Server Fault...)

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.