<table cellspacing="0" cellpadding="0" border="0" ><tr><td valign="top" style="font: inherit;"><DIV>Hi</DIV>
<DIV> </DIV>
<DIV>wir haben einen Server mit 6 Nic am Start, wobei Nic 2 + 3 als Bridge Br0 laufen sollen.</DIV>
<DIV>Wenn ich mir mit tcpdump eth2 und eth3 ansehe, sehe ich jedoch nicht den selben Traffic. Ich bin davon ausgegangen, das der Traffic 1zu1 weitergleitet wird. Wir wollen später über IPtables den Trafic zwischen eth2 und eth3 Filtern (FW/iptables). Anbei meine Config, für den goldenen Tipp wäre ich dankbar.</DIV>
<DIV> </DIV>
<DIV>[root@fil-fra network-scripts]# more ifcfg-*<BR>::::::::::::::<BR>ifcfg-br0<BR>::::::::::::::<BR>DEVICE=br0<BR>TYPE=Bridge<BR>IPADDR=192.168.10.2<BR>NETMASK=255.255.255.0<BR>BROADCAST=192.168.10.255<BR>NETWORK=192.168.10.0<BR>STP=no<BR>IPV6INIT=no<BR>ONBOOT=yes<BR>BOOTPROTO=none<BR>::::::::::::::<BR>ifcfg-eth0<BR>::::::::::::::<BR># Intel Corporation 82546EB Gigabit Ethernet Controller (Copper)<BR>DEVICE=eth0<BR>BOOTPROTO=none<BR>BROADCAST=xx.xx.18.63<BR>HWADDR=00:0E:0C:68:06:F0<BR>IPADDR=xx.xx.18.50<BR>IPV6INIT=no<BR>IPV6_AUTOCONF=no<BR>NETMASK=255.255.255.192<BR>NETWORK=xx.xx.18.0<BR>ONBOOT=yes<BR>GATEWAY=xx.xx.18.1<BR>TYPE=Ethernet<BR>::::::::::::::<BR>ifcfg-eth1<BR>::::::::::::::<BR># Intel Corporation 82546EB Gigabit Ethernet Controller (Copper)<BR>DEVICE=eth1<BR>HWADDR=00:0E:0C:68:06:F1<BR>ONBOOT=no<BR>BOOTPROTO=dhcp<BR>TYPE=Ethernet<BR>::::::::::::::<BR>ifcfg-eth2<BR>::::::::::::::<BR># Intel Corporation 82546GB Gigabit Ethernet Controller
(Copper)<BR>DEVICE=eth2<BR>HWADDR=00:1B:21:52:0F:78<BR>ONBOOT=yes<BR>BRIDGE=br0<BR>::::::::::::::<BR>ifcfg-eth3<BR>::::::::::::::<BR># Intel Corporation 82546GB Gigabit Ethernet Controller (Copper)<BR>DEVICE=eth3<BR>HWADDR=00:1B:21:52:0F:79<BR>ONBOOT=yes<BR>BRIDGE=br0<BR>::::::::::::::<BR>ifcfg-eth4<BR>::::::::::::::<BR># Intel Corporation 82546GB Gigabit Ethernet Controller (Copper)<BR>DEVICE=eth4<BR>HWADDR=00:1B:21:52:0F:7A<BR>TYPE=ETHER<BR>#BRIDGE=br1<BR>ONBOOT=yes<BR>BOOTPROTO=dhcp<BR>::::::::::::::<BR>ifcfg-eth5<BR>::::::::::::::<BR># Intel Corporation 82546GB Gigabit Ethernet Controller (Copper)<BR>DEVICE=eth5<BR>HWADDR=00:1B:21:52:0F:7B<BR>TYPE=ETHER<BR>#BRIDGE=br1<BR>ONBOOT=yes<BR>BOOTPROTO=dhcp<BR>::::::::::::::<BR>ifcfg-lo<BR>::::::::::::::<BR>DEVICE=lo<BR>IPADDR=127.0.0.1<BR>NETMASK=255.0.0.0<BR>NETWORK=127.0.0.0<BR># If you're having problems with gated making 127.0.0.0/8 a martian,<BR># you can change this to something else
(255.255.255.255, for example)<BR>BROADCAST=127.255.255.255<BR>ONBOOT=yes<BR>NAME=loopback</DIV>
<DIV> </DIV>
<DIV>[root@fil-fra network-scripts]#uname -a<BR>Linux fil-fra 2.6.18-164.el5 #1 SMP Thu Sep 3 03:33:56 EDT 2009 i686 i686 i386 GNU/Linux[root@fil-fra network-scripts]#brctl show<BR>bridge name bridge id STP enabled interfaces<BR>br0 8000.001b21520f78 no eth3<BR> eth2<BR>[root@fil-fra
network-scripts]#[root@rtp-filter-frankfurt network-scripts]# ifconfig -a<BR>br0 Link encap:Ethernet HWaddr 00:1B:21:52:0F:78<BR> inet addr:192.168.10.2 Bcast:192.168.10.255 Mask:255.255.255.0<BR> inet6 addr: fe80::21b:21ff:fe52:f78/64 Scope:Link<BR> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1<BR> RX packets:8454 errors:0 dropped:0 overruns:0 frame:0<BR> TX packets:34 errors:0 dropped:0 overruns:0 carrier:0<BR> collisions:0 txqueuelen:0<BR> RX bytes:413866 (404.1 KiB) TX bytes:8500 (8.3 KiB)</DIV>
<DIV>eth0 Link encap:Ethernet HWaddr 00:0E:0C:68:06:F0<BR> inet addr:xx.xx.18.50 Bcast:xx.xx.18.63 Mask:255.255.255.192<BR> inet6 addr: fe80::20e:cff:fe68:6f0/64 Scope:Link<BR> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1<BR> RX packets:42052 errors:0 dropped:0 overruns:0 frame:0<BR> TX packets:47260 errors:0 dropped:0 overruns:0 carrier:0<BR> collisions:0 txqueuelen:100<BR> RX bytes:5850469 (5.5 MiB) TX bytes:28105052 (26.8 MiB)<BR> Base address:0x3040
Memory:fe8c0000-fe8e0000</DIV>
<DIV>...</DIV>
<DIV>eth2 Link encap:Ethernet HWaddr 00:1B:21:52:0F:78<BR> inet6 addr: fe80::21b:21ff:fe52:f78/64 Scope:Link<BR> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1<BR> RX packets:361408 errors:0 dropped:0 overruns:0 frame:0<BR> TX packets:204 errors:0 dropped:0 overruns:0 carrier:0<BR> collisions:1 txqueuelen:100<BR> RX bytes:41240902 (39.3 MiB) TX bytes:54453 (53.1 KiB)<BR> Memory:fe780000-fe7a0000</DIV>
<DIV>eth3 Link encap:Ethernet HWaddr 00:1B:21:52:0F:79<BR> inet6 addr: fe80::21b:21ff:fe52:f79/64 Scope:Link<BR> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1<BR> RX packets:0 errors:0 dropped:0 overruns:0 frame:0<BR> TX packets:196596 errors:0 dropped:0 overruns:0 carrier:0<BR> collisions:0 txqueuelen:1000<BR> RX bytes:0 (0.0 b) TX bytes:12424750 (11.8 MiB)<BR> Memory:fe7a0000-fe7c0000</DIV>
<DIV>...<BR><BR><BR>lg Jan</DIV>
<DIV><A href="mailto:centos-de@centos.org"></A> </DIV></td></tr></table><br>__________________________________________________<br>Do You Yahoo!?<br>Sie sind Spam leid? Yahoo! Mail verfügt über einen herausragenden Schutz gegen Massenmails. <br>http://mail.yahoo.com