Topic: Bridge Firewall w/SME7a

[jazbokes]

Has anyone be able to setup bridge firewall on sme7a?

This article is translated from Germany to English..

http://www.deen.ath.cx/?http://www.linternal.de/index.php?option=com_content&task=view&id=24&Itemid=28

# Ergänzen der Yum Config um das RPMForge Archiv
 # In /etc/yum.repos.d/RPMforge.repo
 [RPMforge]
 name=DAG-RHEL-4
 baseurl=http://apt.sw.be/redhat/el4/en/i386/dag/
 gpgcheck=1
 
 # Die Centos und RPMforge GPG Schlüssel installieren
 rpm --import http://mirror.centos.org/centos/RPM-GPG-KEY-CentOS-4
 rpm --import http://dag.wieers.com/packages/RPM-GPG-KEY.dag.txt
 
 # Das System updaten
 yum update
 
 # Weitere Pakete hinzufügen
 yum install mc
 yum -y install webmin mc ntop snort bridge-utils ebtables arptables
 


[root@centos ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE=eth0
ONBOOT=no
HWADDR=

[root@centos ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth1
# Intel Corp. 82557/8/9 [Ethernet Pro 100]
DEVICE=eth1
ONBOOT=no
HWADDR=

[root@centos ~]# cat /usr/sbin/bridge-up
#!/bin/sh
modprobe arp_tables
modprobe arpt_mangle
modprobe arptable_filter
modprobe ipt_physdev
#
brctl addbr br0
brctl addif br0 eth0
brctl addif br0 eth1
#
ip link set eth0 up
ip link set eth1 up
ip link set br0 up

[root@centos ~]# cat /usr/sbin/bridge-down
#!/bin/sh
ip link set br0 down
brctl delif br0 eth0
brctl delif br0 eth1
brctl delbr br0
ip link set eth0 down
ip link set eth1 down