[TriLUG] fIREWALL QUESTION

Chris Knowles chrisk at trilug.org
Fri Jan 3 12:03:16 EST 2003


And if you're looking for a reportedly easy way to do it, Shorewall
(www.shorewall.net) firewall can help you to do proxyarp.  

CJK

On Fri, 2003-01-03 at 11:33, Tanner Lovelace wrote:
> On Fri, 2003-01-03 at 11:30, Jim Ray wrote:
> > Please correct me if I'm wrong; however, me thinks firewalls in general
> > do not operate at the arp/mac level but rather ip and the next layer
> > (tcp, udp).  All the arp/mac stuff takes place at a lower network layer
> > and should not enter the firewall picture at all.
> > 
> > I've never seen any settings for arp/mac stuff in any firewall I've ever
> > used.  Plenty of settings for ip and port stuff, though.
> 
> Actually, what I think he meant was, can a linux box ask for and
> receive packets for a particular mac address (presumably not its
> own) and then once it has them, subject them to its firewall setup.
> 
> Ryan, I've never done it myself, but you might try looking for
> something called proxyarp.  I think that will do what you want.
> 
> Good luck,
> Tanner
-- 
==
Chris Knowles
chrisk at trilug.org
==
+++ Divide By Cucumber Error. Please Reinstall Universe And Reboot +++
(Hogfather)



More information about the TriLUG mailing list