0
votes
1answer
13 views

BROUTING's target “redirect” in ebtables behaving in a strange way

Situation (host A)-------(bridge B)------(host C) where: A has MAC A on it's interface C has MAC C on it's interface B has MAC BA and MAC BC on it's two interfaces (depending on who it's facing) ...
2
votes
0answers
52 views

Understanding an OpenVPN bridge from iptable's point of view

In my scenario, there is a machine which acts as both an iptables-based firewall and an OpenVPN-server at the same time. It has two network interfaces - eth1 is connected to the internet whereas eth0 ...
0
votes
1answer
102 views

Iptables: Matching packets for bridged interface

I'm building a firewall configuration tool based on iptables, and trying to get a "bump in the wire" scenario working. Given a setup with eth0 and eth1 in a bridge br0 and a third interface eth2: ...
1
vote
1answer
83 views

All connections to a bridged domU originate from the dom0 public IP instead of real IP

I have a Dom0 with a mixed configuration: bridged networking and NAT is set up. There is one NIC connected to the internet (& 3 more that are unused). This is my interfaces file: # The primary ...
0
votes
1answer
218 views

How accessing a NATed, virtualized (LXC) server over public IP from client itself on a bridged network?

Setup ____________________________ ____________________________ | Host | | Client | | Public IP: 66.66.66.66 | ...
2
votes
1answer
102 views

How can i prevent TINC from relaying DHCP

I am running tinc in several NAT routers running Debian 7 Wheezy, the VPN works fine for months, except because i've set it up in switch mode it relays DHCP requests and answers over all the VPN. The ...
0
votes
0answers
40 views

Forward connecting IP address to KVM guests

I'm running kvm with iptables configured to use DNAT and masquerading. However the guest machines are logging the host bridge ip not the connecting client IP address. Is there a way to configure ...
1
vote
1answer
232 views

Scanning tagged traffic over bridge through iptables

I am working on bridge on linux box using brctl. Now I have to scan and monitor bridge traffic through iptables. So for the same I changed: net.bridge.bridge-nf-call-iptables = 0 to ...
1
vote
1answer
184 views

bridge, vlan and internet access. How?

I'm trying to setup a working connection between my local network and the internet. First I setup a bridge (br0, has an IP address where the other interfaces don't) between eth0 (LAN) and eth1 ...
0
votes
2answers
289 views

Blocking STP Traffic

I am using Xen virtualization with a bridged mode netwrk. I noticed that there is a lot of spanning tree (as understand) traffic coming from a network. Such as: STP 802.1d, Config, Flags [none], ...
0
votes
1answer
123 views

KVM firewall to disallow internet access for group of guests

I've got a KVM server inside a local network (192.168.10.0/24). This server has three interfaces, which are all publicly bridged [1]. Atm I'm only using two of the three interfaces, so the virtual ...
1
vote
1answer
146 views

Network traffic is not being forwarded from a VM to the network using a bridged interface with Xen + libvirt

I'm having trouble getting network access from a VM that I'm running using Xen and libvirt. I've been trying different things and reading similar posts online for a couple of days but I'm really stuck ...
-2
votes
2answers
230 views

Linux Bridge allowing TCP but not UDP

I am using a linux bridge for monitoring some traffic on two vlans. I created two bridges br30 et br40 for each. My problem is that the TCP traffic make it through but not the UDP one. I thought of ...
5
votes
2answers
7k views

Bridging LXC containers to host eth0 so they can have a public IP

UPDATE: I found the solution there: http://www.linuxfoundation.org/collaborate/workgroups/networking/bridge#No_traffic_gets_trough_.28except_ARP_and_STP.29 # cd /proc/sys/net/bridge # ls ...
3
votes
1answer
539 views

Network Bridge in dom0 can not ping domU's

I am using Debian wheezy with XEN 4.1. I have two network bridges xenbr0 and xenbr1. xenbr0 is linked to the real-eth0-nic so the domU's can talk to the outside world, which worked fine. xenbr1 was ...
3
votes
1answer
641 views

Possible for linux bridge to intercept traffic?

I have a linux machine setup as a bridge between a client and a server; brctl addbr0 brctl addif br0 eth1 brctl addif br0 eth2 ifconfig eth1 0.0.0.0 ifconfig eth2 0.0.0.0 ip link set br0 up I also ...
1
vote
1answer
170 views

Multiple IPs on eth0, bridging to VMs and routing

Current situation: I have a host running 3 virtual machines. One IP for eth0 (xxx.xxx.xxx.239) and one additional for eth0:1 (yyy.yyy.yyy.35). This works fine for me... Host (eth0) (xxx.xxx.xxx.239) ...
2
votes
1answer
530 views

firehol (firewall) with bridge: how to filter

I have two interfaces: eth0 (public address) and lxcbr0 with 10.0.3.1. I have a LXC guest running with ip 10.0.3.10 This is my firehol config: version 5 trusted_ips=`/usr/local/bin/strip_comments ...
0
votes
1answer
149 views

basic help for Nat configuration needed

I have a server with a IP 1.0.0.5/24. This is the main IP address of the server, and now I have two other IP addresses for the server, they are 1.0.2.30/24 and 1.0.2.31/24. I want to make a VirtualBox ...
0
votes
0answers
1k views

Can't ping from VM to node on host network, but can arping

I have a KVM instance running inside of an Ubuntu host. I'm not able to ping/connect from the VM to the private interface of a physical node on the same private network of the host, although I can ...
1
vote
3answers
1k views

iptables / bridge / NAT setup

Between our gateway and our LAN, we have a bridging firewall running iptables. I want to add an additional NIC into the firewall and set up a private subnet on it. Traffic from this subnet which is ...
2
votes
1answer
2k views

KVM second private network (bridged), how to get working?

this seems to be a hard problem. I would therefore be very thankfull for your advice. I spend two days trying to get this running, but with no success. (The Public IP Stuff is working, but not the ...
1
vote
0answers
884 views

bypass ip destination squid tproxy bridge

I have configured a squid transparent tproxy. All works fine. Now I need all the traffic going to an external IP (internet) does not pass through the proxy. Do I need to modify iptables, ebetables ...
1
vote
2answers
170 views

iptables on bridged networking

I need some assistance to create a set of iptable rules to route and restrict usage between interfaces in a bridge (br0). # brctl show bridge name bridge id STP enabled interfaces ...
2
votes
1answer
552 views

Configure iptables with a bridge and static IPs

I have my server set up with several public IP addresses, with a network configuration as follows (with example IPs): eth0 \- br0 - 1.1.1.2 |- [VM 1's eth0] | |- 1.1.1.3 | \- ...
0
votes
1answer
699 views

virtual networking with iptables in KVM host

I'm working on a design for a Linux based appliance and looking to use KVM for the virtualisation layer. The system has 3 VM's interconnected in very specific ways. The fag packet diagram I've been ...
7
votes
3answers
8k views

Iptables - Bridge and Forward chain

I have setup ethernet bridge br0 that contains two interfaces eth0 and tap0 brctl addbr br0 brctl addif eth0 brctl addif tap0 ifconfig eth0 0.0.0.0 promisc up ifconfig tap0 0.0.0.0 promisc up ...