Re: Firewall trasparente

[Alessio Curri <alessio.curri@elettra.trieste.it>]

Riccardo Tortorici wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> On Nov 8, 2005, at 5:54 PM, Fabio Bizzi wrote:
>
> > Da non dimenticare il forwarding dell'IP:
> > echo "0" > /proc/sys/net/ipv4/ip_forward
>
>
> in questo modo l'IP forwarding lo blocchi.
> echo 1 > /proc/sys/net/ipv4/ip_forward
> Ric
>
> - - Riccardo Tortorici -
> Linux Registered User #365170
> Count yourself @ http://counter.li.org/ !
> - --
> Encrypted Mails Welcome
> GPG key: 0xF3FCE306 available on  wwwkeys.pgp.net
> GPG key fingerprint = C1C4 CA17 5135 8F5C 94C2  3347 4A22 67DB F3FC E306
> - --
> no1984.org - Stop TCG!
> - --
> HTML email can be dangerous, is not always readable, wastes bandwidth
> and is simply not necessary please don't send them to me!
>
>
>
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.1 (Darwin)
>
> iD8DBQFDcS8cSiJn2/P84wYRAg6LAJ0T6P3o1iAsqGd42hw6Uj1WMzs7IQCcDZwC
> Kv2e+8axxqvB0I1iztx9WaI=
> =wfB5
> -----END PGP SIGNATURE-----
In realtà per il firewall-bridge (aka firewall trasparente) l'ip_forward 
non serve a 1.
Infatti non deve forwadare a livello ip, ma a livello 2.


Alessio