Add rule to prevent bridged traffic getting pushed through the host's iptables rules if requested (do_not_firewall_bridged_traffic).

ip6t-firewall-server

@@ -142,6 +142,20 @@ echo
 
 
 
+# -------------
+# --- Prevent bridged traffic getting pushed through the host's iptables rules
+# -------------
+
+echononl "\tPrevent bridged traffic getting pushed through the host's iptables rules"
+if $do_not_firewall_bridged_traffic ; then
+   $ip6t -I FORWARD -m physdev --physdev-is-bridged -j ACCEPT
+   echo_done
+else
+   echo_skipped
+fi
+
+
+
 # -------------
 # ------------ Stopping firewall if only flushing was requested (parameter flush)
 # -------------

ip6t-firewall-server.conf.sample

@@ -64,9 +64,14 @@ ext_ifs="$ext_if_1 $ext_if_2 $ext_if_3"
 # - is this a virtuel system ?
 host_is_vm=false
 
-# - Extern Interfaces Static Lines
-# -    (comma separated list)
-#ext_if_static="eth0"
+# - Prevent bridged traffic getting pushed through the 
+# - host's iptables rules
+# -
+# - Note: Maybe youe have also to activate forwarding
+# -
+# -    Set: kernel_forward_between_interfaces=true
+# -
+do_not_firewall_bridged_traffic=false
 
 # - VPN Interfaces
 # -    (comma separated list)

ipt-firewall-server

@@ -221,6 +221,20 @@ echo
 
 
 
+# -------------
+# --- Prevent bridged traffic getting pushed through the host's iptables rules
+# -------------
+
+echononl "\tPrevent bridged traffic getting pushed through the host's iptables rules"
+if $do_not_firewall_bridged_traffic ; then
+   $ipt -I FORWARD -m physdev --physdev-is-bridged -j ACCEPT
+   echo_done
+else
+   echo_skipped
+fi
+
+
+
 # -------------
 # ------------ Stopping firewall if only flushing was requested (parameter flush)
 # -------------

ipt-firewall-server.conf.sample

@@ -64,9 +64,14 @@ ext_ifs="$ext_if_1 $ext_if_2 $ext_if_3"
 # - is this a virtuel system ?
 host_is_vm=false
 
-# - Extern Interfaces Static Lines
-# -    (comma separated list)
-#ext_if_static="eth0"
+# - Prevent bridged traffic getting pushed through the 
+# - host's iptables rules
+# -
+# - Note: Maybe youe have also to activate forwarding
+# -
+# -    Set: kernel_activate_forwarding=true
+# -
+do_not_firewall_bridged_traffic=false
 
 # - VPN Interfaces
 # -    (comma separated list)