brctl won't allow statefull inspection
Hi everybody. I'm using OpenVPN in ethernet bridging mode to create ethernet-bridged VPN's. For this, I need to use the brctl tool to create the ethernet bridge on my (server) side. The bridge itself works 100%, my problem is, that after I start the bridge, iptables marks the state of all inbound packets to INVALID, instead of NEW, ESTABLISHED and RELATED. I'm not fully aware of the working of the bridge, but to my understanding, it only works on the ethernet-frame level (and i have found something called ebtables, but without any reference to statefull inspection whatsoever), so why does it interfere with iptables's statefull inspection?
Thank you for your reply
|