Is there a suitable chain for iptables when eth is in Promisc mode?
- by user1495181
I have a fron-end machine.
Machine have2 eth cards.
I want to use netfilter queue to do some checks on the packets.
I set eth like this:
ifconfig eth0 0.0.0.0 promisc up
ifconfig eth1 0.0.0.0 promisc up
I want to have an iptable rule like this(only example):
iptables -A INPUT -i eth0 -j LOG --log-prefix " eth0 packet "
but the packet is no passed through the iptables ,because it dosnt target to this MAC.
Promisc mode didnt help.
I saw that there is a way to add iptables chain for PROMISC, but need compilation...
Is there any simplier way to have iptables rule when packet is not target to this eth.
Currently i bypass this by creating a bridge between 2 eth and put rule on the FORWARD, but i done want to create bridge.