Re: Ebtables to stop DHCP and ARP

support@xxxxxxxxxxxxxxx wrote:
Well, that didn't do it exactly - but it pointed me in the right
direction. I will post the rules I ended up with when I'm all done.
I've only been using ebtables/iptables for a little while, so I'm
still getting the hang of it.

Yep, I know the feeling - it takes experience to be sure. Thanks for
the follow up.

Here's something that occurred to me and might help. Replacing

ebtables -A INPUT -i $PRIVATE_NET -d ff:ff:ff:ff:ff:ff/
ff:ff:ff:ff:ff:ff -p IPv4 --ip-prot udp --ip-dport ! 67:68 -j ACCEPT

with

ebtables -A INPUT -i $PRIVATE_NET -d ff:ff:ff:ff:ff:ff/
ff:ff:ff:ff:ff:ff -p IPv4 --ip-dport ! 67:68 -j ACCEPT

should accept all IPv4 (not just UDP) traffic not bound for ports 67,68.
IPv4 traffic bound for those ports will dropped, but that seems rather
unlikely to cause a problem.

Regards-
--
Clifford Kite
.