[Firehol-support] How to allow arp broadcasts?

[Vincent Danjean]

JW wrote:
> Hello,
> 
> I'm having trouble with my firewall preventing my VPN from working.
> 
> If the firewall is off, the VPN works fine. So it's not the VPN that's broken.
> 
> I have "server accept all" and "client accept all" for the brige (br0) 
> ethernet (eth0) and tap (tap0) interfaces. BUt apparently that's not enough.
> 
> Someone suggested I needed to allow arp to pass through (I guess from tap0 to 
> eth0 - or else through br0) but I can't find any documentation on allowing 
> arp broadcasts.
> 
> Does anyone know how to configure the firehol.conf for that?

Do you have a router for your bridge ?

################################################
# Bridge (Home <-> Home)
################################################
    router bridge inface br0 outface br0
                 route all accept

   Regards,
     Vincent

> 
> Thanks,
> 
> 	JW
> 

-- 
Vincent Danjean                 Adresse: Laboratoire d'Informatique de Grenoble
Téléphone:  +33 4 76 61 20 11            ENSIMAG - antenne de Montbonnot
Fax:        +33 4 76 61 20 99            ZIRST 51, avenue Jean Kuntzmann
Email: Vincent.Danjean at imag.fr           38330 Montbonnot Saint Martin