IPTables interface switch (-i ethx) problem w/ bridge-Firewall
I've been using Slackware Linux for Bridge-Firewalls for a long time with the 2.4.xx family and Netfilter up to date.
My problem began when I started using 2.6.xx. Now I'm using 2.6.24, with netfilter POM-ng patches enabled and iptables 1.4.0. Everything works just fine as usual except that my iptables ruleset that includes physical interfaces are not working anymore. I mean, rules like:
0 0 MARK all -- eth0 * 0.0.0.0/0 0.0.0.0/0
If I don't use the interface switch (-i eth0) or just put the logical bridge interface br0, it works just fine. But if I try to use -i eth0 or -i eth1, etc, the rule just never match, even on the filter INPUT chain.
Am I missing something? I re-read the Bridge-Firewalling HOWTO and many other documents, but didn't find anything related to this issue. Should I forget iptables in a bridge-firewall for this porpouse and just begin using ebtables instead?
Thank you all very much and sorry if I didn't put enought information about my problem here. If so, please, just ask me!