2
votes
0answers
37 views

How can i prevent TINC from relaying DHCP

I am running tinc in several NAT routers running Debian 7 Wheezy, the VPN works fine for months, except because i've set it up in switch mode it relays DHCP requests and answers over all the VPN. The ...
0
votes
0answers
18 views

Forward connecting IP address to KVM guests

I'm running kvm with iptables configured to use DNAT and masquerading. However the guest machines are logging the host bridge ip not the connecting client IP address. Is there a way to configure ...
1
vote
1answer
47 views

Scanning tagged traffic over bridge through iptables

I am working on bridge on linux box using brctl. Now I have to scan and monitor bridge traffic through iptables. So for the same I changed: net.bridge.bridge-nf-call-iptables = 0 to ...
1
vote
1answer
89 views

bridge, vlan and internet access. How?

I'm trying to setup a working connection between my local network and the internet. First I setup a bridge (br0, has an IP address where the other interfaces don't) between eth0 (LAN) and eth1 ...
0
votes
2answers
197 views

Blocking STP Traffic

I am using Xen virtualization with a bridged mode netwrk. I noticed that there is a lot of spanning tree (as understand) traffic coming from a network. Such as: STP 802.1d, Config, Flags [none], ...
0
votes
1answer
115 views

KVM firewall to disallow internet access for group of guests

I've got a KVM server inside a local network (192.168.10.0/24). This server has three interfaces, which are all publicly bridged [1]. Atm I'm only using two of the three interfaces, so the virtual ...
0
votes
0answers
58 views

Filtering Broadcasted UDP Packets on a Specific Bridged Interface

My Linux PC has two network interfaces (eth0 & usb0) that are bridged. There is a service on my PC that broadcasts UDP packets on a specific port (7000). I would like to prevent these UDP packets ...
1
vote
1answer
120 views

Network traffic is not being forwarded from a VM to the network using a bridged interface with Xen + libvirt

I'm having trouble getting network access from a VM that I'm running using Xen and libvirt. I've been trying different things and reading similar posts online for a couple of days but I'm really stuck ...
-2
votes
2answers
175 views

Linux Bridge allowing TCP but not UDP

I am using a linux bridge for monitoring some traffic on two vlans. I created two bridges br30 et br40 for each. My problem is that the TCP traffic make it through but not the UDP one. I thought of ...
5
votes
2answers
5k views

Bridging LXC containers to host eth0 so they can have a public IP

UPDATE: I found the solution there: http://www.linuxfoundation.org/collaborate/workgroups/networking/bridge#No_traffic_gets_trough_.28except_ARP_and_STP.29 # cd /proc/sys/net/bridge # ls ...
3
votes
1answer
443 views

Network Bridge in dom0 can not ping domU's

I am using Debian wheezy with XEN 4.1. I have two network bridges xenbr0 and xenbr1. xenbr0 is linked to the real-eth0-nic so the domU's can talk to the outside world, which worked fine. xenbr1 was ...
2
votes
1answer
526 views

Possible for linux bridge to intercept traffic?

I have a linux machine setup as a bridge between a client and a server; brctl addbr0 brctl addif br0 eth1 brctl addif br0 eth2 ifconfig eth1 0.0.0.0 ifconfig eth2 0.0.0.0 ip link set br0 up I also ...
1
vote
1answer
165 views

Multiple IPs on eth0, bridging to VMs and routing

Current situation: I have a host running 3 virtual machines. One IP for eth0 (xxx.xxx.xxx.239) and one additional for eth0:1 (yyy.yyy.yyy.35). This works fine for me... Host (eth0) (xxx.xxx.xxx.239) ...
2
votes
1answer
443 views

firehol (firewall) with bridge: how to filter

I have two interfaces: eth0 (public address) and lxcbr0 with 10.0.3.1. I have a LXC guest running with ip 10.0.3.10 This is my firehol config: version 5 trusted_ips=`/usr/local/bin/strip_comments ...
0
votes
1answer
143 views

basic help for Nat configuration needed

I have a server with a IP 1.0.0.5/24. This is the main IP address of the server, and now I have two other IP addresses for the server, they are 1.0.2.30/24 and 1.0.2.31/24. I want to make a VirtualBox ...
0
votes
0answers
935 views

Can't ping from VM to node on host network, but can arping

I have a KVM instance running inside of an Ubuntu host. I'm not able to ping/connect from the VM to the private interface of a physical node on the same private network of the host, although I can ...
1
vote
3answers
949 views

iptables / bridge / NAT setup

Between our gateway and our LAN, we have a bridging firewall running iptables. I want to add an additional NIC into the firewall and set up a private subnet on it. Traffic from this subnet which is ...
2
votes
1answer
1k views

KVM second private network (bridged), how to get working?

this seems to be a hard problem. I would therefore be very thankfull for your advice. I spend two days trying to get this running, but with no success. (The Public IP Stuff is working, but not the ...
1
vote
0answers
811 views

bypass ip destination squid tproxy bridge

I have configured a squid transparent tproxy. All works fine. Now I need all the traffic going to an external IP (internet) does not pass through the proxy. Do I need to modify iptables, ebetables ...
1
vote
2answers
160 views

iptables on bridged networking

I need some assistance to create a set of iptable rules to route and restrict usage between interfaces in a bridge (br0). # brctl show bridge name bridge id STP enabled interfaces ...
2
votes
1answer
514 views

Configure iptables with a bridge and static IPs

I have my server set up with several public IP addresses, with a network configuration as follows (with example IPs): eth0 \- br0 - 1.1.1.2 |- [VM 1's eth0] | |- 1.1.1.3 | \- ...
0
votes
1answer
684 views

virtual networking with iptables in KVM host

I'm working on a design for a Linux based appliance and looking to use KVM for the virtualisation layer. The system has 3 VM's interconnected in very specific ways. The fag packet diagram I've been ...
6
votes
3answers
6k views

Iptables - Bridge and Forward chain

I have setup ethernet bridge br0 that contains two interfaces eth0 and tap0 brctl addbr br0 brctl addif eth0 brctl addif tap0 ifconfig eth0 0.0.0.0 promisc up ifconfig tap0 0.0.0.0 promisc up ...