Re: [squid-users] rules ebtables

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Mon, 22 Mar 2010 23:21:43 +0000

On Mon, 22 Mar 2010 19:37:36 -0300, Ariel <lauchafernandez_at_gmail.com>
wrote:
> hi. list a query, finish putting together a bridge + squid with
> tproxy, but I have a doubt with ebtables rules, as in the wiki says
> one thing and does another ami me
>
> only works if I put --redirect-target ACCEPT the end of regulation
> instead of DROP
>
>
> Is this right?

No. The meaning of "ACCEPT" and "DROP" have different semantics in
ebtables.

DROP means to stop bridging and perform normal routing rules on the
packets.

ACCEPT means the kernel will bridge all packets without passing them to
Squid or the local host routing.
It will get the pages, and externally show the client IP because it really
is the client going out.

Amos
Received on Mon Mar 22 2010 - 23:21:50 MDT

This archive was generated by hypermail 2.2.0 : Tue Mar 23 2010 - 12:00:06 MDT