Physdev Support

[dreamind@…]

Hello,

I'm looking for physdev support (as in iptables) in vuurmuur.
Is there a chance that this will get implemented in vuurmuur?

In iptables physdev is done via -m physdev and --physdev-in or/and --physdev-out.
This is important to me, because I'm planning to use vuurmuur for a bridged firewall.

For example a iptables call could look like:
iptables -A FORWARD -i br0 -o br0 -m physdev --physdev-in eth0 --physdev-out eth1 -j ACCEPT

(added with services and or ip's as you might like)

For documentation, see the manpage of iptables, the section about physdev.

Thanks

Stefan Pfetzing

[victor]

This is something I'd like to support one day, but I don't think it will be done anytime soon unless someone other than me decides to implement this.

[victor]

I think it may be interesting to describe all parts of Vuurmuur that would need to be changed to properly support bridge setups. Since I've never used Vuurmuur on a bridge I don't really have a good view on how the whole concept of Vuurmuur relates to it.