<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=ks_c_5601-1987">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="date"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="time"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:¹ÙÅÁ;
panose-1:2 3 6 0 0 1 1 1 1 1;}
@font-face
{font-family:±¼¸²;
panose-1:2 11 6 0 0 1 1 1 1 1;}
@font-face
{font-family:"\@±¼¸²";
panose-1:2 11 6 0 0 1 1 1 1 1;}
@font-face
{font-family:"\@¹ÙÅÁ";
panose-1:2 3 6 0 0 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
text-align:justify;
text-justify:inter-ideograph;
text-autospace:none;
word-break:break-hangul;
font-size:10.0pt;
font-family:¹ÙÅÁ;}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:±¼¸²;
color:windowtext;}
/* Page Definitions */
@page Section1
{size:595.3pt 841.9pt;
margin:99.25pt 3.0cm 3.0cm 3.0cm;
layout-grid:18.0pt;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=KO link=blue vlink=purple>
<div class=Section1 style='layout-grid:18.0pt'>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>Hi. <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>Thanks for your reply.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>1. My test environment..<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'><host A> ---- (eth0) <linux box(LiSA is installed)>
(eth1) --- <Gateway> -- external<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>Kernel : 2.6.16.19<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>LiSA : lisa-<st1:date o:ls="trans" Year="2006" Month="4" Day="4"
w:st="on">2006.04.04</st1:date>-2<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>2. And my VLAN configuration<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>[root@flight ~]# cat /proc/net/switch/vif <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>vlan1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>[root@flight ~]# cat /proc/net/switch/ifaces <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>Port Trunk Enabled VLAN<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>---- ----- ------- ----<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>eth1
0 1 1 <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>eth0
0 1 1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>[root@flight ~]# cat /proc/net/switch/vlan <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>VLAN
Name
Status Ports<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>---- -------------------------------- ---------
-------------------------------<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>1
default
active eth1 eth0 <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>1002
fddi-default
active <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>1003
trcrf-default
active <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>1004
fddinet-default
active <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>1005
trbrf-default
active <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>[root@flight ~]# ifconfig vlan1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>vlan1 Link encap:Ethernet HWaddr <st1:time
o:ls="trans" Hour="0" Minute="6" w:st="on">00:6</st1:time>C:6D:73:00:01 <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'> inet addr:xxx.xxx.xxx.xxx
Bcast:xxx.xxx.xxx.xxx Mask:255.255.255.0<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'> UP
BROADCAST RUNNING MULTICAST MTU:1460 Metric:1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'> RX
packets:213666 errors:0 dropped:0 overruns:0 frame:0<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'> TX
packets:92644 errors:0 dropped:0 overruns:0 carrier:0<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'> collisions:0
txqueuelen:1000 <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'> RX
bytes:0 (0.0 B) TX bytes:0 (0.0 B)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>3. netfilter rule<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>[root@flight ~]# iptables -L -nv<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>Chain INPUT (policy ACCEPT 1528K packets, 188M bytes)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'> pkts bytes target prot opt
in out
source
destination <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'> pkts bytes target prot opt
in out
source
destination <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=±¼¸²><span lang=EN-US
style='font-size:10.0pt;font-family:±¼¸²;color:blue'>
0 0 DROP icmp
-- * *
0.0.0.0/0
0.0.0.0/0 <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>Chain OUTPUT (policy ACCEPT 427K packets, 67M bytes)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'> pkts bytes target prot opt
in out
source destination
<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'><o:p> </o:p></span></font></p>
<div style='mso-element:para-border-div;border:none;border-bottom:solid windowtext 1.0pt;
padding:0cm 0cm 1.0pt 0cm'>
<p class=MsoNormal style='border:none;padding:0cm'><font size=2 face=±¼¸²><span
lang=EN-US style='font-size:10.0pt;font-family:±¼¸²'><o:p> </o:p></span></font></p>
</div>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>When I executed ping to external host in <host A>, I received
the reply.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>But I inserted policy to drop the icmp.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>And the packets/bytes count(FORWARD chain and the drop rule)
did not increased.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'>Regards,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=±¼¸²><span lang=EN-US style='font-size:10.0pt;
font-family:±¼¸²'><o:p> </o:p></span></font></p>
</div>
</body>
</html>