Re: Linux firewall in Bridged mode

[haad <haaaad () gmail com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Shain Singh wrote:
> Hi,
>  
> I have been trying to find some decent documentation on this to no avail as
> yet. Is anyone able to give me the pro/cons of a firewall in bridged mode?
> Perhaps situations where it would be more useful, etc?
>  
> Ideally I am looking to setup a situation where the DMZ will be public IP
> addresses and I don't want to implement NATing either. Is running iptables
> with a bridged mode NIC able to process rules faster than in "normal routed"
> modem configurations with the same types of filtering and so forth?
>  
> Please let me know if I need to explain further and thanks in advance.
>  
> --
> Shaineel Singh
> MakePeace Media LTD
>  
> http://mpm.org.au/shsingh
Try ebtables http://ebtables.sourceforge.net/.
EBT is iptables implementation for using in bridge environment.



Regards
- --
Adam Hamsik
tel.c 0904 937 495
ICQ 249727910
jabber haad () jabber org
- --------------------------------------------------------------
There are 10 kinds of people in the world. Those who understand
binary numbers, and those who don't.
                                
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (NetBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFD9l7t9Wt2FT7y228RAmIdAJ9tXmBidSlhSaV/lGC88ISa3kD+LwCeINPK
KK9LUFL0LoeVMvrIJdOeCyQ=
=kuEV
-----END PGP SIGNATURE-----

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------