Re: Transparent bridge firewall with bridge-nf

2003-10-31 Thread Benjamin Goedeke
On Thu, 2003-10-30 at 08:53, Norbert Preining wrote: > Our bridged/fw was running 160 day with code from there. Now I have > installed a new kernel (2.4.22) with the current ebtables code > (ebtables.sf.net) which can do even more, although I don't need it. But > ebtables is the code in 2.6 and ac

Re: Transparent bridge firewall with bridge-nf

2003-10-31 Thread Benjamin Goedeke
On Thu, 2003-10-30 at 08:53, Norbert Preining wrote: > Our bridged/fw was running 160 day with code from there. Now I have > installed a new kernel (2.4.22) with the current ebtables code > (ebtables.sf.net) which can do even more, although I don't need it. But > ebtables is the code in 2.6 and ac

Re: Transparent bridge firewall with bridge-nf

2003-10-30 Thread Norbert Preining
On Mit, 29 Okt 2003, Benjamin Goedeke wrote: > http://bridge.sf.net to replace the firewall once the transition to Our bridged/fw was running 160 day with code from there. Now I have installed a new kernel (2.4.22) with the current ebtables code (ebtables.sf.net) which can do even more, although I

Re: Transparent bridge firewall with bridge-nf

2003-10-30 Thread Norbert Preining
On Mit, 29 Okt 2003, Benjamin Goedeke wrote: > http://bridge.sf.net to replace the firewall once the transition to Our bridged/fw was running 160 day with code from there. Now I have installed a new kernel (2.4.22) with the current ebtables code (ebtables.sf.net) which can do even more, although I

Re: Transparent bridge firewall with bridge-nf

2003-10-29 Thread Blars Blarson
In article <[EMAIL PROTECTED]> [EMAIL PROTECTED] writes: >I administer a LAN that will soon be moved from private to public IP >space. The LAN is inside a university network and as such in a rather >hostile environment. Another alternative is a proxy-arp firewall. See http://www.blars.org/sapaf.

Re: Transparent bridge firewall with bridge-nf

2003-10-29 Thread Blars Blarson
In article <[EMAIL PROTECTED]> [EMAIL PROTECTED] writes: >I administer a LAN that will soon be moved from private to public IP >space. The LAN is inside a university network and as such in a rather >hostile environment. Another alternative is a proxy-arp firewall. See http://www.blars.org/sapaf.

Re: Transparent bridge firewall with bridge-nf

2003-10-29 Thread Dariush Pietrzak
> as opposed to a setup with a firewall+router. With Linux there are few problems with transparent firewalling setup - ie, normal iptables don't work with such setup to well, you need to use special bridge-iptables, ebtables IIRC. One drawback to that is that you can't do everything your'e used to

Transparent bridge firewall with bridge-nf

2003-10-29 Thread Benjamin Goedeke
Hello everyone, I administer a LAN that will soon be moved from private to public IP space. The LAN is inside a university network and as such in a rather hostile environment. At the moment there is a firewall with a public IP doing all the filtering and a NAT/router box behind this. Now I'm thin

Re: Transparent bridge firewall with bridge-nf

2003-10-29 Thread Dariush Pietrzak
> as opposed to a setup with a firewall+router. With Linux there are few problems with transparent firewalling setup - ie, normal iptables don't work with such setup to well, you need to use special bridge-iptables, ebtables IIRC. One drawback to that is that you can't do everything your'e used to

Transparent bridge firewall with bridge-nf

2003-10-29 Thread Benjamin Goedeke
Hello everyone, I administer a LAN that will soon be moved from private to public IP space. The LAN is inside a university network and as such in a rather hostile environment. At the moment there is a firewall with a public IP doing all the filtering and a NAT/router box behind this. Now I'm thin