Search found 119 matches

Goto page 1, 2, 3, 4, 5, 6, 7, 8  Next
Goto page 1, 2, 3, 4, 5, 6, 7, 8  Next
Author Message
  Topic: How to bind IP/MAC to specific interface ports w/ IPTables?
MonarchX

Replies: 1
Views: 130

PostForum: Advanced Networking   Posted: Mon Jan 03, 2022 15:25   Subject: How to bind IP/MAC to specific interface ports w/ IPTables?
How can I bind local IP addresses and/or MAC addresses to specific interfaces (eth0, br0, wlan0, etc.) via IPTables and/or EBTables and/or ARPTables? Assume default policy has to be ACCEPT.

The wa ...
  Topic: What Layer 2 NetFilter/Filter tools exist for Non-Bridges?
MonarchX

Replies: 14
Views: 1250

PostForum: Advanced Networking   Posted: Fri Nov 26, 2021 18:58   Subject: What Layer 2 NetFilter/Filter tools exist for Non-Bridges?
I think somewhere here around, it was explained very much in details, what is the reason, why layer 2 filtering is not going to happen...
DDWRT SPI firewall works on WAN to LAN and LAN to WAN traffic ...
  Topic: What Layer 2 NetFilter/Filter tools exist for Non-Bridges?
MonarchX

Replies: 14
Views: 1250

PostForum: Advanced Networking   Posted: Fri Nov 26, 2021 11:12   Subject: What Layer 2 NetFilter/Filter tools exist for Non-Bridges?
Just to summarize what I wanted from initial thread was to find an answer on how isolate 2 LAN clients on the same subnet and same VLAN (or no VLAN) via EBTables, but it doesn't appear to be possible, ...
  Topic: Bridge ARP isolation via EBTables
MonarchX

Replies: 13
Views: 1694

PostForum: Advanced Networking   Posted: Sun Nov 21, 2021 21:26   Subject: Bridge ARP isolation via EBTables
I don't want to make yet another EBTables thread, but I'd like to know how to view EBTables counters. Command from EBTables manpages doesn't work. In fact, several guides state that EBTables is bugged ...
  Topic: What Layer 2 NetFilter/Filter tools exist for Non-Bridges?
MonarchX

Replies: 14
Views: 1250

PostForum: Advanced Networking   Posted: Fri Nov 12, 2021 10:28   Subject: What Layer 2 NetFilter/Filter tools exist for Non-Bridges?
LAN Port to LAN Port is handled by the switch. The router does not see these packets and cannot filter them. As far as I have seen, no switch in dd-wrt supports filtering.

So is it DD-WRT firmware ...
  Topic: What Layer 2 NetFilter/Filter tools exist for Non-Bridges?
MonarchX

Replies: 14
Views: 1250

PostForum: Advanced Networking   Posted: Thu Nov 11, 2021 20:51   Subject: What Layer 2 NetFilter/Filter tools exist for Non-Bridges?
MAC address filtering (layer 2) can be done with ebtables or iptables. It's like whack-a-mole, you're dancing around a topic trying to find a solution for something that may not have one that is clea ...
  Topic: What Layer 2 NetFilter/Filter tools exist for Non-Bridges?
MonarchX

Replies: 14
Views: 1250

PostForum: Advanced Networking   Posted: Thu Nov 11, 2021 12:00   Subject: What Layer 2 NetFilter/Filter tools exist for Non-Bridges?
IPTables = Layer 3 filtering
ARPTables = ARP filtering
EBTables = Layer 2 filtering (including ARP), but only for Bridge interfaces

What NetFilter tools exist for Layer 2 filtering on Non-Bridge ...
  Topic: Abnormal ARP Request
MonarchX

Replies: 4
Views: 533

PostForum: Advanced Networking   Posted: Tue Nov 09, 2021 13:45   Subject: Abnormal ARP Request
Wireshark labels those abnormal requests as "ARP Announce" and "Gratuitous". I assume my SysCTL.conf just ignores such requests.
  Topic: Abnormal ARP Request
MonarchX

Replies: 4
Views: 533

PostForum: Advanced Networking   Posted: Tue Nov 09, 2021 9:59   Subject: Abnormal ARP Request
I don't like to share more info than necessary about my topology, but what is going on seems to fit the definition of Gratuitous ARP Attack Cache Poisoning - https://github.com/mehiar/ARP-Poisoning-an ...
  Topic: Abnormal ARP Request
MonarchX

Replies: 4
Views: 533

PostForum: Advanced Networking   Posted: Mon Nov 08, 2021 21:52   Subject: Abnormal ARP Request
192.168.7.3 is a client device in 192.168.7.1/24 network, where 192.168.7.1 is gateway.

Request who-has 192.168.7.3 tell 192.168.7.3, length 28
Request who-has 192.168.7.3 tell 192.168.7.3, lengt ...
  Topic: Bridge ARP isolation via EBTables
MonarchX

Replies: 13
Views: 1694

PostForum: Advanced Networking   Posted: Fri Oct 29, 2021 15:43   Subject: Bridge ARP isolation via EBTables
I spent half a day figuring out why EBTables were killing off my WiFi - 0x888E (EAP over LAN) had to be accepted for WiFi to work.
  Topic: Bridge ARP isolation via EBTables
MonarchX

Replies: 13
Views: 1694

PostForum: Advanced Networking   Posted: Thu Oct 28, 2021 17:10   Subject: Bridge ARP isolation via EBTables
I don't use DHCP for LAN and assign static IP to each LAN device. I also assign and apply static ARP on-boot for each LAN devices in router and in LAN DNS server. My EBTables rules do not allow for A ...
  Topic: Bridge ARP isolation via EBTables
MonarchX

Replies: 13
Views: 1694

PostForum: Advanced Networking   Posted: Thu Oct 28, 2021 9:53   Subject: Bridge ARP isolation via EBTables
My RP has only 1 loopback interface and 1 Ethernet interface. It does not have any bridge (br0) interfaces. It connects to one of my router's Ethernet ports and shows up in my router's ARP table as a ...
  Topic: Bridge ARP isolation via EBTables
MonarchX

Replies: 13
Views: 1694

PostForum: Advanced Networking   Posted: Thu Oct 28, 2021 0:05   Subject: Bridge ARP isolation via EBTables
Isn't EBTables supposed to work only for bridge interfaces? If such is the the case, then EBTables rules for my Raspberry Pi (which has only one interface) should have no effect, but they do...
  Topic: "Problem with specified source mac" NetFilter erro
MonarchX

Replies: 4
Views: 549

PostForum: Advanced Networking   Posted: Wed Oct 27, 2021 10:37   Subject: "Problem with specified source mac" NetFilter erro
This is a bit off-topic, but when reading examples of anti-spoofing rules, examples mostly include source forwarding rules. Shouldn't anti-spoofing rules cover all directions? EBTables support syntax ...
All times are GMT
Navigation
Jump to: