|
|
发表于 2011-2-11 22:27:09
|
显示全部楼层
参考RG200E-AB里的ebtables,初步作了一个:: e2 h- _2 G- o8 D* q' j
ebtables -L --Lc
" w4 e+ t+ o# n4 O3 ~Bridge table: filter% `) C7 Y" Y2 ]! P$ x) f' `" l3 A! t
9 v& ~ _ Q! s; k) V
Bridge chain: INPUT, entries: 9, policy: ACCEPT
1 S) ?; h. ^2 Y+ w+ U-p PPP_DISC -i eth1 -j DROP , pcnt = 0 -- bcnt = 0
5 S) W; Y* n; Z' X, C6 S0 K- n9 A-p PPP_DISC -i eth2 -j DROP , pcnt = 0 -- bcnt = 0. H) T3 z) n3 N5 J3 w7 z. c/ s
-p PPP_DISC -i vlan85 -j DROP , pcnt = 3 -- bcnt = 138. v- s- c3 m2 y/ U; U) V
-i vlan51 -j DROP , pcnt = 55741 -- bcnt = 75494176! ~! M$ q. ~/ `/ H
-p IPv4 -i vlan85 --ip-proto udp --ip-sport 68 -j DROP , pcnt = 2 -- bcnt = 1152
, }3 t( T8 \1 u-p IPv6 -i vlan85 -j DROP , pcnt = 0 -- bcnt = 0' d1 _% @# H% F; _( v" O/ F
-d Broadcast -i vlan85 -j ACCEPT , pcnt = 61 -- bcnt = 2806
7 ?' E: C- B% M5 E-p IPv4 -i vlan85 --ip-dst ! 192.168.1.1 -j DROP , pcnt = 486 -- bcnt = 193322 l3 o7 }) B7 M! g, F! L$ Z
-p IPv4 -i vlan85 --ip-proto udp --ip-sport 68 -j DROP , pcnt = 0 -- bcnt = 0, d4 C L. l q: `/ N
* O6 V/ A# c" ?Bridge chain: FORWARD, entries: 9, policy: ACCEPT
, ~! N& y, j9 N7 h" c-o vlan51 -j DROP , pcnt = 611 -- bcnt = 28742
, T& [- J! d0 C, {# O# E8 Y' V-i vlan51 -o eth1 -j DROP , pcnt = 55685 -- bcnt = 754916009 h3 D% X3 `% K. q9 d& [
-i vlan51 -o eth2 -j DROP , pcnt = 55685 -- bcnt = 754916002 @$ W" u. R# [- b: C- J1 ^
-i vlan85 -o vlan51 -j ACCEPT , pcnt = 0 -- bcnt = 0) |. v$ n% M/ C5 s+ c
-i vlan51 -o vlan85 -j ACCEPT , pcnt = 55685 -- bcnt = 75491600
0 w( ?) z, _; h4 Q; B- l5 z-o vlan85 -j DROP , pcnt = 76 -- bcnt = 6079
) W% D! P' O* @: j/ u) |* X-i vlan85 -j DROP , pcnt = 2132 -- bcnt = 902846 p7 a% I! V- M- h( h8 t( a9 L" r
-p IPv4 -i eth1 --ip-proto udp --ip-sport 68 -j DROP , pcnt = 0 -- bcnt = 0
: b2 _5 z4 c: k/ S-p IPv4 -i eth2 --ip-proto udp --ip-sport 68 -j DROP , pcnt = 0 -- bcnt = 0
" j" ~0 ^( l* s2 x3 Q, w7 S! P* u! i0 F. L# L& l& L# l9 \
Bridge chain: OUTPUT, entries: 2, policy: ACCEPT- K& a! E! y& N& W2 ?2 M
-o vlan51 -j DROP , pcnt = 0 -- bcnt = 0
. v _- v* C# w( C( O-p IPv6 -o vlan85 -j DROP , pcnt = 0 -- bcnt = 0 |
|