On Tuesday 28 September 2010 21:08:53 Magosányi Árpád wrote:
But with three nodes in a linear topology user-A-B-C, the reject firewall chain (basically the FORWARD chain) eats up the packets user->A This is the same rule which rejects batman packets A->C which go through B, and there are the gate interface which I do not understand, so while the following rules seem to solve the problem at least for three nodes, I have a feeling that I am not on the right path, and maybe on a way to cause packet storms. iptables -A forwarding_rule -d 10.42.0.0/24 ! -s 10.42.0.0/24 -i ath0 -o ath0 -j ACCEPT iptables -A forwarding_rule -s 10.42.0.0/24 ! -d 10.42.0.0/24 -o ath0 -i ath0 -j ACCEPT
Could you explain what kind of traffic you actually want to block ? I also don't understand what packet storm you are afraid of.
Regards, Marek