Printable View
Hello everybody,
I have a problem when deploy Snort and iptables on vmware.
Here is my network topo:
Attachment 4217
The problem is :
how to let snort Server can connect to internet
i set default gateway on snort server to 192.168.1.2(br0 of Firewall)
Please help me.
Thanks in advanced
In your diagram you have the gateway as being 192.168.1.1, 192.168.1.2 is not the gateway it is just the bridge.
Thanks Robert,
I have pointed the gateway to modem ip.But i have another problem.
I can connect to internet from Lan.But how to let Iptables Firewall to handle the packet come from inside and outside.
In this case , i have use some rule to block all traffic come in and come out like:
But from LAN i still connect to internet,Firewall did not do anything.PHP Code:iptables -F
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP
I know a bridged firewall is a firewall that operates at layer 2.
So what do i do to handle packet come in and come out?
Please help me
Is this the only thing you have setup in the firewall?
No,I use those rules just for testing only.
I just want to block or accept packet come through my iptables Firewall.
But iptables can not deal with packet(Bridged-Layer 2) in this diagram.
How do i have to do to resove this matter?
Could you please give me some documents about this matter?
Thanks
If you want to use a bridge then you should be looking at ebtables instead of iptables.
Hi,
Thanks for your reply.
I have discovered that ebtables is a far more powerful interface for manipulating traffic at Layer 2.
However i just want to deploy a transparent firewall( iptables) to control traffic at layer 3 for drop,accept ... ip src,ip dest...
And another important thing is NAT on this transparent firewall.
When we deploy transparent firewall, i think i can only use rule FORWARD.So how about the matter if i want to nat ?
Please help me solve this matter.
You have to decide if you want bridging or routing.
Bridging you use ebtables
Routing you use iptables
I do not know much about ebtables as I do not use bridging.
If you are looking to control Layer 3 then you should switch to routing.
