diff options
| author | Bart De Schuymer <bdschuym@pandora.be> | 2002-11-03 16:11:28 +0000 |
|---|---|---|
| committer | Bart De Schuymer <bdschuym@pandora.be> | 2002-11-03 16:11:28 +0000 |
| commit | 048119030721d37e1dae72302a5fd33c99ba4fe2 (patch) | |
| tree | ffffc3a7803543fc689f69a751bba41d953a29a8 /docs | |
| parent | b2fffa9efb9f2c4ceb90c83e9d22611916c55a24 (diff) | |
Add physdev comments
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/br_fw_ia/br_fw_ia.html | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/docs/br_fw_ia/br_fw_ia.html b/docs/br_fw_ia/br_fw_ia.html index 3773001..7bb5887 100644 --- a/docs/br_fw_ia/br_fw_ia.html +++ b/docs/br_fw_ia/br_fw_ia.html @@ -54,6 +54,9 @@ <A HREF="#section9">Using the MAC module extension for <EM>iptables</EM></A> </LI> + <LI> + <A HREF="#section10">Using the <EM>iptables</EM> physdev match module for kernel 2.5</A> + </LI> </OL> <A NAME="section1"></A> <P CLASS="section"> @@ -608,6 +611,16 @@ echo '1' > /proc/sys/net/ipv4/ip_forward pressured enough I could hack something up to make this unpleasant side effect go away. </P> + <A NAME="section10"></A> + <P CLASS="section"> + 10. Using the <EM>iptables</EM> physdev match module for kernel 2.5 + </P> + The 2.5 standard kernel contains an <EM>iptables</EM> match module + called <EM>physdev</EM> which has to be used to match the bridge's + physical in and out ports. Its usage is simple: + <PRE>iptables -m physdev --physdev-in <bridge-port></PRE> + and + <PRE>iptables -m physdev --physdev-out <bridge-port></PRE> <HR> <PRE> Released under the GNU Free Documentation License. |