Чудит ebtables

0

1
Вот список правил:
root@bras:~# ebtables -L
Bridge table: filter

Bridge chain: INPUT, entries: 1, policy: ACCEPT
--logical-in br0 -j DROP 

Bridge chain: FORWARD, entries: 1, policy: ACCEPT
--logical-in br0 -j SG

Bridge chain: OUTPUT, entries: 1, policy: ACCEPT
--logical-out br0 -j DROP 

Bridge chain: SG, entries: 57, policy: DROP
-p IPv6 -s 22:24:76:48:85:55 -i tap10 --ip6-src 2a01:d0:c353:180::7/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff -j RETURN 
-p IPv6 -s 22:24:76:48:85:55 -i tap10 --ip6-src 2a01:d0:c353:180::777/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff -j RETURN 
-p IPv6 -s 22:24:76:48:85:55 -i tap10 --ip6-src fe80::2024:76ff:fe48:8555/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --ip6-proto ipv6-icmp --ip6-icmp-type neighbour-solicitation -j RETURN 
-p IPv6 -s 22:24:76:48:85:55 -i tap10 --ip6-src fe80::2024:76ff:fe48:8555/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --ip6-proto ipv6-icmp --ip6-icmp-type neighbour-advertisement -j RETURN 
-p IPv6 -s 22:24:76:48:85:55 -i tap10 --ip6-src fe80::2024:76ff:fe48:8555/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --ip6-proto ipv6-icmp --ip6-icmp-type neighbour-solicitation -j RETURN 
-p IPv4 -s 22:24:76:48:85:55 -i tap10 --ip-src 198.18.25.28 -j RETURN 
-p ARP -s 22:24:76:48:85:55 -i tap10 --arp-ip-src 198.18.25.28 -j RETURN 
-p IPv6 -s 52:54:8b:c8:88:10 -i eth15 --ip6-src 2a01:d0:c353:180::248:222/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff -j RETURN 
-p IPv6 -s 52:54:8b:c8:88:10 -i eth15 --ip6-src fe80::5054:8bff:fec8:988/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --ip6-proto ipv6-icmp --ip6-icmp-type neighbour-advertisement -j RETURN 
-p IPv6 -s 52:54:8b:c8:88:10 -i eth15 --ip6-src fe80::5054:8bff:fec8:988/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --ip6-proto ipv6-icmp --ip6-icmp-type neighbour-solicitation -j RETURN 
-p IPv4 -s 52:54:8b:c8:88:10 -i eth15 --ip-src 198.18.25.27 -j RETURN 
-p ARP -s 52:54:8b:c8:88:10 -i eth15 --arp-ip-src 198.18.25.27 -j RETURN 
-p IPv4 -s 52:54:8b:c8:88:8 -i eth14 --ip-src 198.18.25.26 -j RETURN 
-p ARP -s 52:54:8b:c8:88:8 -i eth14 --arp-ip-src 198.18.25.26 -j RETURN 
-p IPv4 -s 52:54:8b:c8:88:99 -i eth13 --ip-src 198.18.25.25 -j RETURN 
-p ARP -s 52:54:8b:c8:88:99 -i eth13 --arp-ip-src 198.18.25.25 -j RETURN 
-p IPv4 -s 52:54:8b:c8:88:77 -i eth12 --ip-src 198.18.25.24 -j RETURN 
-p ARP -s 52:54:8b:c8:88:77 -i eth12 --arp-ip-src 198.18.25.24 -j RETURN 
-p IPv4 -s 52:54:8b:22:58:47 -i eth11 --ip-src 198.18.25.23 -j RETURN 
-p ARP -s 52:54:8b:22:58:47 -i eth11 --arp-ip-src 198.18.25.23 -j RETURN 
-p IPv4 -s 94:9c:28:42:41:2c -i eth11 --ip-src 198.18.25.88 -j RETURN 
-p ARP -s 94:9c:28:42:41:2c -i eth11 --arp-ip-src 198.18.25.88 -j RETURN 
-p IPv4 -s 52:54:4c:57:89:21 -i eth10 --ip-src 198.18.25.22 -j RETURN 
-p ARP -s 52:54:4c:57:89:21 -i eth10 --arp-ip-src 198.18.25.22 -j RETURN 
-p IPv6 -s 52:54:4c:57:89:21 -i eth10 --ip6-src 2a01:d0:c353:180:222::222/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff -j RETURN 
-p IPv6 -s 52:54:4c:57:89:21 -i eth10 --ip6-src fe80::5054:4cff:fe57:8921/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --ip6-proto ipv6-icmp --ip6-icmp-type neighbour-advertisement -j RETURN 
-p IPv6 -s 52:54:4c:57:89:21 -i eth10 --ip6-src fe80::5054:4cff:fe57:8921/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --ip6-proto ipv6-icmp --ip6-icmp-type neighbour-solicitation -j RETURN 
-p IPv6 -s 52:54:8b:c8:88:92 --ip6-src 2a01:d0:c353:180:174::77/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff -j RETURN 
-p IPv6 -s 52:54:8b:c8:88:92 --ip6-src fe80::5054:8bff:fec8:8892/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --ip6-proto ipv6-icmp --ip6-icmp-type neighbour-solicitation -j RETURN 
-p IPv6 -s 52:54:8b:c8:88:92 --ip6-src fe80::5054:8bff:fec8:8892/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --ip6-proto ipv6-icmp --ip6-icmp-type neighbour-advertisement -j RETURN 
-p IPv4 -s 52:54:8b:c8:88:92 -i eth9 --ip-src 198.18.25.21 -j RETURN 
-p ARP -s 52:54:8b:c8:88:92 -i eth9 --arp-ip-src 198.18.25.21 -j RETURN 
-p ARP -s 52:54:0:fd:e5:43 -i eth3 --arp-ip-src 198.18.25.3 -j RETURN 
-p IPv4 -s 52:54:0:fd:e5:43 -i eth3 --ip-src 198.18.25.3 -j RETURN 
-p IPv6 -s 52:54:0:fd:e5:43 -i eth3 --ip6-src 2a01:d0:c353:180:174::88/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff -j RETURN 
-p IPv6 -s 52:54:0:fd:e5:43 -i eth3 --ip6-src fe80::5054:ff:fefd:e543/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --ip6-proto ipv6-icmp --ip6-icmp-type neighbour-solicitation -j RETURN 
-p IPv6 -s 52:54:0:fd:e5:43 -i eth3 --ip6-src fe80::5054:ff:fefd:e543/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --ip6-proto ipv6-icmp --ip6-icmp-type neighbour-advertisement -j RETURN 
-p IPv6 -s 52:54:4c:57:88:28 -i eth8 --ip6-src fe80::5054:4cff:fe57:8828/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --ip6-proto ipv6-icmp --ip6-icmp-type neighbour-solicitation -j ACCEPT 
-p IPv6 -s 52:54:4c:57:88:28 -i eth8 --ip6-src fe80::5054:4cff:fe57:8828/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --ip6-proto ipv6-icmp --ip6-icmp-type neighbour-advertisement -j ACCEPT 
-p IPv6 -s 52:54:4c:57:88:28 -i eth8 --ip6-src 2a01:d0:c353:180:174::1/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff -j ACCEPT 
-p ARP -s 52:54:4c:57:88:28 -i eth8 --arp-ip-src 198.18.25.150 -j ACCEPT 
-p IPv4 -s 52:54:4c:57:88:28 -i eth8 --ip-src 198.18.25.150 -j ACCEPT 
-p IPv6 -s 52:54:8b:c8:88:10 -i eth7 --ip6-src 2a01:d0:c353:180::174:111/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff -j ACCEPT 
-p IPv6 -s 52:54:8b:c8:88:10 -i eth7 --ip6-src fe80::5054:8bff:fec8:8810/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --ip6-proto ipv6-icmp --ip6-icmp-type neighbour-advertisement -j ACCEPT 
-p IPv6 -s 52:54:8b:c8:88:10 -i eth7 --ip6-src fe80::5054:8bff:fec8:8810/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --ip6-proto ipv6-icmp --ip6-icmp-type neighbour-solicitation -j ACCEPT 
-p IPv4 -s 52:54:8b:c8:88:10 -i eth7 --ip-src 198.18.25.20 -j ACCEPT 
-p ARP -s 52:54:8b:c8:88:10 -i eth7 --arp-ip-src 198.18.25.20 -j ACCEPT 
-p IPv4 -s 52:54:8b:c8:98:7 -i eth6 --ip-src 198.18.25.19 -j ACCEPT 
-p ARP -s 52:54:8b:c8:98:7 -i eth6 --arp-ip-src 198.18.25.19 -j ACCEPT 
-p ARP -s 52:54:0:12:34:56 -i eth4 --arp-ip-src 198.18.25.18 -j ACCEPT 
-p IPv4 -s 52:54:0:12:34:56 -i eth4 --ip-src 198.18.25.18 -j ACCEPT 
-p IPv4 -s 52:54:3b:c8:48:8 -i eth5 --ip-src 198.18.25.14 -j ACCEPT 
-p ARP -s 52:54:3b:c8:48:8 -i eth5 --arp-ip-src 198.18.25.14 -j ACCEPT 
-i vlan10 -j ACCEPT 
-i vlan11 -j ACCEPT 
-i eth1 -j ACCEPT 
-i veth0 -j ACCEPT 
root@bras:~# ebtables -D SG -p IPv6 -s 22:24:76:48:85:55 -i tap10 --ip6-src 2a01:d0:c353:180::7/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff -j RETURN 
root@bras:~# ebtables -D SG -p IPv6 -s 22:24:76:48:85:55 -i tap10 --ip6-src 2a01:d0:c353:180::777/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff -j RETURN
root@bras:~# ebtables -D SG p IPv6 -s 22:24:76:48:85:55 -i tap10 --ip6-src fe80::2024:76ff:fe48:8555/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --ip6-proto ipv6-icmp --ip6-icmp-type neighbour-solicitation -j RETURN
No extra options allowed with -D start_nr[:end_nr].
root@bras:~# ebtables -D SG -p IPv6 -s 22:24:76:48:85:55 -i tap10 --ip6-src fe80::2024:76ff:fe48:8555/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --ip6-proto ipv6-icmp --ip6-icmp-type neighbour-solicitation -j RETURN
root@bras:~# ebtables -D SG -p IPv6 -s 22:24:76:48:85:55 -i tap10 --ip6-src fe80::2024:76ff:fe48:8555/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --ip6-proto ipv6-icmp --ip6-icmp-type neighbour-advertisement -j RETURN 
root@bras:~# ebtables -D SG -p IPv6 -s 22:24:76:48:85:55 -i tap10 --ip6-src fe80::2024:76ff:fe48:8555/ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --ip6-proto ipv6-icmp --ip6-icmp-type neighbour-solicitation -j RETURN 
root@bras:~# ebtables -D SG -p IPv4 -s 22:24:76:48:85:55 -i tap10 --ip-src 198.18.25.28 -j RETURN 
root@bras:~# ebtables -D SG -p ARP -s 22:24:76:48:85:55 -i tap10 --arp-ip-src 198.18.25.28 -j RETURN
tap10 - это интерфейс туннеля, из за которого и начинаются танцы с бубном. Короче говоря, они связанны с отвалом ipv6 во всей сети. Дело в том, что когда я на том устройстве создал домолнительный сетевой мост на том устройстве, к которуму вёл этот туннель, у меня по непонятным причинам отволился весь ipv6 во всей сети. С чем связанна данная проблема?
Ссылка
Похожие темы
