| Using IPTables MAC Filter Module in VE ? [message #4883] |
Tue, 01 August 2006 15:25  |
MeMu
Messages: 5
Registered: August 2006
|
Junior Member |
|
|
Hi!
I'm using OpenVZ 2.6.16-026test015 and it works very well beside some little problems with iptables...
Is there any possibility to use the ipt_mac module in VE?
I need to block network packages by mac addresses inside a VE...
For example i only want to block MAC 00:11:22:33:44:55 in veth101.0 and allow those packages from above MAC in veth102.0...
Prefiltering network packages inside the hardware node is not possible (in my opinion), because of the hardware constellation (bridge):
......./--- Wireless Interface (ath0)
bridge0---- Virtual Interface 1 (veth101.0)
'''''''\--- Virtual Interface 2 (veth102.0)
It works fine in the hardware node only but fails loading in the virtual node:
/etc/vz# vzctl enter 101
Warning: Unknown iptable module: ipt_mac, skipped
Warning: Unknown iptable module: xt_mac, skipped
entered into VPS 101
root@vn01:/# iptables -A INPUT -m mac --mac-source 00:11:22:33:44:55 -j DROP
iptables: No chain/target/match by that name
vz.conf:
[...snip...]
IPTABLES="ipt_REJECT ipt_tos ipt_limit ipt_multiport iptable_filter iptable_mangle ipt_TCPMSS ipt_tcpmss ipt_ttl ipt_length ipt_mac xt_mac"
Thanks for some hints or tricks 
bye
MeMu
[Updated on: Tue, 01 August 2006 15:26] Report message to a moderator |
|
|
|
|
|
|
|
|
|
|
|
OpenVZ Forum
Members
Search
Help
Register
Login
Home
but anyway... Thanks for the information!
