|
发表于 2011-2-11 22:27:09
|
显示全部楼层
参考RG200E-AB里的ebtables,初步作了一个:
1 d/ l4 M" H- y% U! \& [ebtables -L --Lc
# K! a- U5 `' U* C7 v1 hBridge table: filter
: m" x2 y/ G2 R2 u6 [ r6 ?5 Z( v$ i0 n1 j
Bridge chain: INPUT, entries: 9, policy: ACCEPT( C2 B1 K' W# Y) U+ P' Q
-p PPP_DISC -i eth1 -j DROP , pcnt = 0 -- bcnt = 0
) k9 i9 e, L2 t: c9 h. [-p PPP_DISC -i eth2 -j DROP , pcnt = 0 -- bcnt = 08 x) K2 W( m9 a
-p PPP_DISC -i vlan85 -j DROP , pcnt = 3 -- bcnt = 138
& j4 n. O! `$ [: ^* {) g; t9 d8 [-i vlan51 -j DROP , pcnt = 55741 -- bcnt = 754941765 a! }2 @2 C8 R! H, L
-p IPv4 -i vlan85 --ip-proto udp --ip-sport 68 -j DROP , pcnt = 2 -- bcnt = 1152
+ @, s/ S- X4 l* w0 W& S-p IPv6 -i vlan85 -j DROP , pcnt = 0 -- bcnt = 06 E. Z7 `0 n' ^1 O. n
-d Broadcast -i vlan85 -j ACCEPT , pcnt = 61 -- bcnt = 2806
: U( p: H4 \5 @( H0 Y; f-p IPv4 -i vlan85 --ip-dst ! 192.168.1.1 -j DROP , pcnt = 486 -- bcnt = 19332 g A+ c% k1 d9 O# u
-p IPv4 -i vlan85 --ip-proto udp --ip-sport 68 -j DROP , pcnt = 0 -- bcnt = 04 `/ B F( X+ J u5 k
) p) ]$ c0 N0 j) B9 r/ M
Bridge chain: FORWARD, entries: 9, policy: ACCEPT; S% D' j. L( n1 o4 i4 X7 w
-o vlan51 -j DROP , pcnt = 611 -- bcnt = 28742
5 }9 p/ Z. v3 O: _: k( c; ?-i vlan51 -o eth1 -j DROP , pcnt = 55685 -- bcnt = 75491600
- I% J3 _: y7 P" ^- ~+ U/ t+ O-i vlan51 -o eth2 -j DROP , pcnt = 55685 -- bcnt = 754916008 [4 R( D/ n8 p! J; p8 B
-i vlan85 -o vlan51 -j ACCEPT , pcnt = 0 -- bcnt = 0
$ f$ P, }2 O4 N-i vlan51 -o vlan85 -j ACCEPT , pcnt = 55685 -- bcnt = 754916005 s) r, j5 F2 n1 t- i
-o vlan85 -j DROP , pcnt = 76 -- bcnt = 6079
7 ?8 F5 E8 }/ h& |/ M0 ^3 J* T5 @-i vlan85 -j DROP , pcnt = 2132 -- bcnt = 90284
9 K7 \" Y( O+ x" U- V! \: ~, a3 [-p IPv4 -i eth1 --ip-proto udp --ip-sport 68 -j DROP , pcnt = 0 -- bcnt = 0
0 w7 V1 Y2 I5 A. }# k-p IPv4 -i eth2 --ip-proto udp --ip-sport 68 -j DROP , pcnt = 0 -- bcnt = 0
/ t2 O" v, T5 h: |. F$ n/ `) d6 C" `- F' |
Bridge chain: OUTPUT, entries: 2, policy: ACCEPT+ j3 a5 \& R- R# {
-o vlan51 -j DROP , pcnt = 0 -- bcnt = 03 A. F# L% ^ u" Q
-p IPv6 -o vlan85 -j DROP , pcnt = 0 -- bcnt = 0 |
|