Commit 40ce9ea2 authored by Dimitris Aragiorgis's avatar Dimitris Aragiorgis

Change ferm

Mangle packets comming from tap+ and prv+ devices
Signed-off-by: default avatarDimitris Aragiorgis <dimara@grnet.gr>
parent 7d38c21d
domain ip { domain ip {
table mangle { table mangle {
chain PREROUTING { chain PREROUTING {
proto udp dport 67 NFQUEUE queue-num 42; interface tap+ proto udp dport 67 NFQUEUE queue-num 42;
interface prv+ proto udp dport 67 NFQUEUE queue-num 42;
} }
} }
} }
...@@ -9,8 +10,8 @@ domain ip { ...@@ -9,8 +10,8 @@ domain ip {
domain ip6 { domain ip6 {
table mangle { table mangle {
chain PREROUTING { chain PREROUTING {
proto icmpv6 icmpv6-type router-solicitation NFQUEUE queue-num 43; interface tap+ proto icmpv6 icmpv6-type router-solicitation NFQUEUE queue-num 43;
proto icmpv6 icmpv6-type neighbour-solicitation NFQUEUE queue-num 44; interface tap+ proto icmpv6 icmpv6-type neighbour-solicitation NFQUEUE queue-num 44;
} }
} }
} }
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment