Reputation
Top tag
Next privilege 5 Rep.
Participate in meta
Badges
1
Newest
 Editor
Impact
~401 people reached

Jan
16
awarded  Editor
Jan
16
revised How can I block all traffic to/from an bridged interface while allowing DHCP?
Edits as per @Kai Petzke's comments
Jan
16
suggested approved edit on How can I block all traffic to/from an bridged interface while allowing DHCP?
Jan
15
comment How can I block all traffic to/from an bridged interface while allowing DHCP?
Thanks @suprjami - I guess my rules would be ebtables --ip-source-port 67:68 --ip-destination-port 67:68 -j ACCEPT and ebtables -j DROP? (Sorry for the multiple edits - I didn't realise you can't do code blocks in comments!)
Jan
14
comment How can I block all traffic to/from an bridged interface while allowing DHCP?
@pepoluan This is a system I've been given - I'm not at liberty to install new hardware. However, we are using the PC for various other tasks that a router can't do. (It runs several other services, for a start.) Also, in my experience routers need to be rebooted if you change things like bridging/filtering settings, whereas we need to be able to do this on-the-fly. If there are routers that are capable of this, I'd be interested to hear about them.
Jan
13
comment How can I block all traffic to/from an bridged interface while allowing DHCP?
Thanks @Reaces, but that question is precisely the one that prompted me to post this! Having said that, re-reading it made me notice that iptables apparently can't block DHCP traffic, so perhaps my solution is to block "all" (i.e. everything bar DHCP) traffic using iptables - I'll look into that.
Jan
13
asked How can I block all traffic to/from an bridged interface while allowing DHCP?