Editing Bridge doesn't forward packets

Jump to: navigation, search

Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then save the changes below to finish undoing the edit.
Latest revision Your text
Line 1: Line 1:
−
Sometimes a bridge can mysteriously drop packets and not forward them.
+
Sometimes bridge can mysteriously drop the packets and not forward them.
 
e.g. eyck user experienced a problem when some of the broadcasts were not
 
e.g. eyck user experienced a problem when some of the broadcasts were not
 
delivered to container via the bridge.
 
delivered to container via the bridge.
Line 23: Line 23:
 
     BOOTP/DHCP, Reply, length 300
 
     BOOTP/DHCP, Reply, length 300
  
−
However, eth0 inside the container received only 2nd packet with a BOOTP/DHCP reply and doesn't see the 1st one with the request itself:
+
However, eth0 inside container receives only 2nd packet with BOOTP/DHCP reply and doesn't see the 1st one with the request itself:
 
   15:21:52.291145 00:08:02:ac:36:20 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 172.17.8.254.67 > 255.255.255.255.68:
 
   15:21:52.291145 00:08:02:ac:36:20 > ff:ff:ff:ff:ff:ff, ethertype IPv4 (0x0800), length 342: 172.17.8.254.67 > 255.255.255.255.68:
 
     BOOTP/DHCP, Reply, length 300
 
     BOOTP/DHCP, Reply, length 300
Line 29: Line 29:
 
== Resolution ==
 
== Resolution ==
  
−
It is not obvious at all, but bridges (though they have their own ebtables filters) do also call iptables FORWARD chain when forwarding packets between interfaces.
+
It is not obvious at all, but bridges (though have own ebtables filters) do also call iptables FORWARD chain when forwarding packets between interfaces.
 
Thus your FORWARD iptables rules should allow all the packets which are supposed to go through.
 
Thus your FORWARD iptables rules should allow all the packets which are supposed to go through.
  

Please note that all contributions to OpenVZ Virtuozzo Containers Wiki may be edited, altered, or removed by other contributors. If you don't want your writing to be edited mercilessly, then don't submit it here.
 If you are going to add external links to an article, read the External links policy first!

To edit this page, please answer the question that appears below (more info):

Cancel Editing help (opens in new window)
Retrieved from "https://wiki.openvz.org/Bridge_doesn%27t_forward_packets"