I'd like to filter packets passing through a virtual bridge on a Fedora Linux machine. I've enabled the following sysctl options as described in multiple guides:
net.bridge.bridge-nf-call-ip6tables = 1 net.bridge.bridge-nf-call-iptables = 1 net.bridge.bridge-nf-call-arptables = 1
If one packet gets bridged from one port to another, I expect it to be passed throug the
FORWARDING chain of the
filter table of ip(6)tables, but this is not the case.
Is there something which has to be configured additionally?