I have setup ethernet bridge
br0 that contains two interfaces
brctl addbr br0
brctl addif eth0
brctl addif tap0
ifconfig eth0 0.0.0.0 promisc up
ifconfig tap0 0.0.0.0 promisc up
ifconfig br0 10.0.1.1 netmask 255.255.255.0 broadcast 10.0.1.255
FORWARD chain policy is
iptables -P FORWARD DROP
When i do not add following rule the traffic is not passing through bridge.
iptables -A FORWARD -p all -i br0 -j ACCEPT
As far as I understand
iptables is only responsible for IP layer.
ebtables should be responsible for filtering traffic on the ethernet bridge.
So why do I have to add ACCEPT rule in iptable's FORWARD chain?