[linux] pseudo bridge a proxy arp

Jaroslav Soltys jaroslavsoltys na yahoo.com
Středa Prosinec 3 00:38:50 CET 2003


zdravim,
mam 2 sietovky a 2 lokalky, prepojene mojim linuxom na
ktorom behalo bridgovanie, ale kvoli bezpecnosti
muselo ist dole. teraz mam pseudobridge cez proxy_arp
(nechcem na oboch lokalkach nastavovat gateway, je tam
dost 'lusrov'). no a problem s proxy_arp je ze chodi
vsetko ako ma akurat broadcasty asi nie ;( vsak aha:

ifconfig eth0 192.168.3.233 netmask 255.255.255.0
route del -net 192.168.3.0/24
ifconfig eth1 192.168.3.2 netmask 255.255.255.0
ifconfig eth0:0 158.195.102.33 netmask 255.255.255.0
route add default gw 158.195.102.1
route add -host 192.168.3.234 eth0
route add -host 192.168.3.13 eth0
route add -host 192.168.3.115 eth0
route add -host 192.168.3.60 eth0
echo 1 > /proc/sys/net/ipv4/conf/eth0/proxy_arp
echo 1 > /proc/sys/net/ipv4/conf/eth1/proxy_arp
echo 1 > /proc/sys/net/ipv4/conf/eth0/forwarding
echo 1 > /proc/sys/net/ipv4/conf/eth1/forwarding
echo 1 > /proc/sys/net/ipv4/ip_nonlocal_bind

chcem totiz aby uzivatelia z 1 lokalky videli iba tych
4 z druhej (pridam aj packet filtering ale ten je
zatial off). ako je to teda s tym broadcastom ? a ako
by som to mohol spravit aby chodil cezo mna aj
broadcast a mohol by som mat packet filter (co s
klasickym bridgom nejde) ?
dakujem

jard

__________________________________
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/



Další informace o konferenci linux