local process的ebtables匹配问题

hedandi

http://linux.chinaunix.net/bbs/r ... amp;goto=nextoldset
是这个帖子吧,好像没有人回答啊,这个就是本地包的问题,我也是在这里不明白是怎么回事的,那个导图,我搜索了cu中所有关于ebtables的帖子,没有这个呢.版主知道大概是在那个版么,谢谢啊

hedandi

file:///C:/Documents%20and%20Settings/Administrator/Local%20Settings/Temporary%20Internet%20Files/Content.IE5/POFNCMDZ/bridge2c%5B1%5D.png
这个图片里面的local process之后数据包经过的链不对么,bridging的过程是什么样的呢?

hedandi

D:\My Documents\My Pictures\bridge2c.png

hedandi

http://ebtables.sourceforge.net/br_fw_ia/br_fw_ia.html#section2是这个文档上的图片,那个OUTPUT 的hook就是filter表的OUTPUT链啊

hedandi

[img][/img]

Locally originated frames will, after the bridging decision, traverse the nat OUTPUT, the filter OUTPUT and the nat POSTROUTING chains. The nat OUTPUT chain allows to alter the destination MAC address and the filter OUTPUT chain allows to filter frames originating from the bridge box. Note that the nat OUTPUT chain is traversed after the bridging decision, so this is actually too late. We should change this. The nat POSTROUTING chain is the same one as described above.

是由于红色字体所述的原因么,那么这样的话,在哪里去匹配本地发出的包呢?

[ 本帖最后由 hedandi 于 2008-7-17 13:40 编辑 ]

hedandi

这个是总的流程图:[img][/img]

hedandi

恩,请问有哪位大侠对ebtables比较了解不

depthblue_xsc

记得ebtables主要是针对二层的控制吧
这里研究ebtables的似乎不多