Thread (5 messages) 5 messages, 4 authors, 2011-02-02

avoid ip forward replaces the source MAC address

From: John Mahoney <hidden>
Date: 2011-02-02 19:26:02

On Tue, Feb 1, 2011 at 2:39 PM, John Mahoney [off-list ref] wrote:
On Tue, Feb 1, 2011 at 2:27 PM, Elvis Yoan Tamayo Mollares
[off-list ref] wrote:
quoted
hi list, during ip forwarding process, the kernel replace the source MAC
address of the package it received with my own MAC address.. My question
is: Is there any way to avoid this behavior?
That is what routing does at the ip layer. ?You may be able to
accomplish this by bridging the two ports together so that the traffic
is handled at layer 2.
As a side note, looking at the iptables target:
 -m mac --mac-source XX:XX:XX:XX:XX:XX [1]

and the kernel code for that module (net/netfilter/xt_mac.c) it
appears that the src MAC address is saved in the sk_buff and is still
accessible in the PREROUTING, INPUT, and FORWARD chains via
eth_hdr(skb)->h_source.

I do not know if that helps.  I guess my point is my first answer was
the logical one, but it may be possible if you think outside the box.

--
John

[1]http://www.faqs.org/docs/iptables/matches.html#TABLE.MACMATCH
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help