|
|
发表于 2011-2-11 22:27:09
|上海|
显示全部楼层
参考RG200E-AB里的ebtables，初步作了一个：: B. f o2 c3 x) ~2 L9 P, |" r
ebtables -L --Lc
8 n# M4 N" v4 [5 Q+ NBridge table: filter
5 [3 g: G; t- d1 n6 K/ v3 q, `6 F6 ?1 g2 u
Bridge chain: INPUT, entries: 9, policy: ACCEPT
8 t5 F- c, s" Z: v-p PPP_DISC -i eth1 -j DROP , pcnt = 0 -- bcnt = 0' E1 ~9 o8 k' p1 }
-p PPP_DISC -i eth2 -j DROP , pcnt = 0 -- bcnt = 0% q* K2 F- M& w8 q
-p PPP_DISC -i vlan85 -j DROP , pcnt = 3 -- bcnt = 138( S& h y b. D* h9 g/ Y& R
-i vlan51 -j DROP , pcnt = 55741 -- bcnt = 75494176
% l. `; s4 a( _' W D-p IPv4 -i vlan85 --ip-proto udp --ip-sport 68 -j DROP , pcnt = 2 -- bcnt = 1152- V& M& y( e) n! o# G1 K8 {
-p IPv6 -i vlan85 -j DROP , pcnt = 0 -- bcnt = 0- |. l8 H; V* d( p$ b7 C m
-d Broadcast -i vlan85 -j ACCEPT , pcnt = 61 -- bcnt = 28067 H8 D( [; @" e1 S' i# `: ^1 }
-p IPv4 -i vlan85 --ip-dst ! 192.168.1.1 -j DROP , pcnt = 486 -- bcnt = 193327 e- p1 l* H6 c+ \3 V
-p IPv4 -i vlan85 --ip-proto udp --ip-sport 68 -j DROP , pcnt = 0 -- bcnt = 0- `+ p* ~ k, p2 C' J" X# h; \
# m) u4 N0 ^/ m7 L8 FBridge chain: FORWARD, entries: 9, policy: ACCEPT5 O: w8 `. X4 F9 n* r, p0 n, t
-o vlan51 -j DROP , pcnt = 611 -- bcnt = 28742# l; P. d5 y; \) b+ ]
-i vlan51 -o eth1 -j DROP , pcnt = 55685 -- bcnt = 75491600& e- ]( E8 Y; h% R
-i vlan51 -o eth2 -j DROP , pcnt = 55685 -- bcnt = 754916007 q7 D) R4 d* b( }1 Z0 z. A) K
-i vlan85 -o vlan51 -j ACCEPT , pcnt = 0 -- bcnt = 0* }* R1 e/ t1 t& k7 R
-i vlan51 -o vlan85 -j ACCEPT , pcnt = 55685 -- bcnt = 75491600
9 U% s3 F d4 u. j-o vlan85 -j DROP , pcnt = 76 -- bcnt = 6079# L+ G" `0 i- h; a
-i vlan85 -j DROP , pcnt = 2132 -- bcnt = 902842 q8 `' s( }( K. J) z) z. L6 y( y3 u
-p IPv4 -i eth1 --ip-proto udp --ip-sport 68 -j DROP , pcnt = 0 -- bcnt = 0
5 P9 O+ O' s8 M2 Y" x-p IPv4 -i eth2 --ip-proto udp --ip-sport 68 -j DROP , pcnt = 0 -- bcnt = 07 ^4 c) Q7 F' L1 s7 s' \
2 c* ?' I) r9 `! D9 q% ?* e/ p
Bridge chain: OUTPUT, entries: 2, policy: ACCEPT
1 E/ T, ~' |0 w, N' }& w3 R/ e' o-o vlan51 -j DROP , pcnt = 0 -- bcnt = 0
* y& i" o) G0 C/ T0 H; ]/ u) Z-p IPv6 -o vlan85 -j DROP , pcnt = 0 -- bcnt = 0 |
|
楼主: dogb
/1 
44152102000001
