[Platform50-dev] Q: ifaddbr ?

[Anton Farygin]

Антон, не мог бы ты рассказать подробнее про это:
http://git.altlinux.org/people/aspsk/packages/?p=ifaddbr.git

Мне кажется, что с этим чудо-пакетом что-то не так, и его нельзя ставить 
в систему ни в коем случае.

Особенно в такую (работает сейчас на server-4.0, все настройки - через 
etcnet):

# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue
     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
     inet 127.0.0.1/8 scope host lo
2: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
qlen 1000
     link/ether 00:1b:11:79:3b:3b brd ff:ff:ff:ff:ff:ff
3: eth2: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast 
qlen 1000
     link/ether 00:15:f2:e6:7d:cb brd ff:ff:ff:ff:ff:ff
4: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
qlen 1000
     link/ether 00:80:48:48:c7:14 brd ff:ff:ff:ff:ff:ff
5: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
qlen 1000
     link/ether 00:80:48:46:81:d8 brd ff:ff:ff:ff:ff:ff
6: ridervpn: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
qlen 100
     link/ether ee:0c:0b:9c:42:11 brd ff:ff:ff:ff:ff:ff
7: br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue
     link/ether 00:15:f2:e6:7d:cb brd ff:ff:ff:ff:ff:ff
     inet 172.18.0.100/16 scope global br0
     inet 195.xxx.xxx.84/29 scope global br0
     inet 10.9.0.3/24 scope global br0
8: dmlvpn: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
qlen 100
     link/ether 0a:00:6c:9e:f0:d0 brd ff:ff:ff:ff:ff:ff
     inet 10.10.0.1/24 brd 10.10.0.255 scope global dmlvpn
9: tap0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
qlen 100
     link/ether d6:0c:8f:5e:b0:87 brd ff:ff:ff:ff:ff:ff
     inet 10.8.0.1/24 brd 10.8.0.255 scope global tap0
12: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1492 qdisc 
pfifo_fast qlen 3
     link/ppp
     inet 10.152.159.149 peer 10.150.254.183/32 scope global ppp0

# brctl show
bridge name     bridge id               STP enabled     interfaces
br0             8000.0015f2e67dcb       no              eth0
                                                         eth2
                                                         eth1
                                                         ridervpn
# ebtables -L
Bridge table: filter

Bridge chain: INPUT, entries: 0, policy: ACCEPT

Bridge chain: FORWARD, entries: 16, policy: DROP
-p IPv4 --ip-dst ! 172.18.0.0/16 -j DROP
-p ARP --arp-ip-dst ! 172.18.0.0/16 -j DROP
-p IPv4 --ip-dst 192.168.0.3 -j ACCEPT
-p ARP --arp-ip-dst 192.168.0.3 -j ACCEPT
-p IPv4 --ip-dst 192.168.0.2 -j ACCEPT
-p ARP --arp-ip-dst 192.168.0.2 -j ACCEPT
-p IPv4 --among-dst c2:5c:e6:62:9d:38,0:3:99:88:20:d1,0:e0:4d:5:e3:f9, 
-j ACCEPT
-p ARP --among-dst c2:5c:e6:62:9d:38,0:3:99:88:20:d1,0:e0:4d:5:e3:f9, -j 
ACCEPT
-p IPv4 --among-src c2:5c:e6:62:9d:38,0:3:99:88:20:d1,0:e0:4d:5:e3:f9, 
-j ACCEPT
-p ARP --among-src c2:5c:e6:62:9d:38,0:3:99:88:20:d1,0:e0:4d:5:e3:f9, -j 
ACCEPT
-p ARP --arp-ip-dst 172.18.0.101 -j ACCEPT
-p IPv4 --ip-dst 172.18.0.101 -j ACCEPT
-p ARP --arp-ip-dst 172.18.0.102 -j ACCEPT
-p IPv4 --ip-dst 172.18.0.102 -j ACCEPT
-p ARP --arp-ip-dst 10.10.0.2 -j ACCEPT
-p IPv4 --ip-dst 10.10.0.2 -j ACCEPT

Bridge chain: OUTPUT, entries: 0, policy: ACCEPT