linux 二层防火墙,linux二层防火墙，我准备启用此功能（但是无法预知后果）

# Generated by arptables-save v0.0.8 on Thu Nov 12 13:01:14 2009

*filter

:IN ACCEPT [2543:71204]

:OUT ACCEPT [1619:45332]

:FORWARD ACCEPT [0:0]

:llpwip - [0:0]

[103:2884] -A IN -j llpwip

[0:0] -A FORWARD -j llpwip

[3:84] -A llpwip -s 172.20.1.104 -z 00:e0:4c:f8:c8:e1 -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.160 -z 00:1d:ba:78:c2:8e -i eth0 -j ACCEPT

[2:56] -A llpwip -s 172.20.1.161 -z 00:26:18:1d:bb:7c -i eth0 -j ACCEPT

[1:28] -A llpwip -s 172.20.1.162 -z 00:1f:d0:c6:bc:89 -i eth0 -j ACCEPT

[3:84] -A llpwip -s 172.20.1.163 -z 00:1f:d0:c6:bf:f3 -i eth0 -j ACCEPT

[3:84] -A llpwip -s 172.20.1.164 -z 00:50:8d:9c:66:23 -i eth0 -j ACCEPT

[3:84] -A llpwip -s 172.20.1.165 -z 00:23:54:e0:b4:ba -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.167 -z 00:18:f3:a2:87:b9 -i eth0 -j ACCEPT

[2:56] -A llpwip -s 172.20.1.168 -z 00:03:0d:bf:12:b1 -i eth0 -j ACCEPT

[2:56] -A llpwip -s 172.20.1.169 -z 00:ea:01:16:ae:93 -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.170 -z 00:24:1d:31:ba:9b -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.171 -z 00:1d:0f:16:58:d2 -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.20 -z 00:1f:29:b5:b3:8f -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.21 -z 00:0c:f1:da:03:8c -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.22 -z 00:1f:f3:8b:f9:45 -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.23 -z 00:03:0d:bf:12:09 -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.24 -z 00:03:0d:c1:89:38 -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.25 -z 00:05:5d:6a:96:68 -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.26 -z 00:03:0d:af:0c:fa -i eth0 -j ACCEPT

[1:28] -A llpwip -s 172.20.1.27 -z 00:03:0d:bf:b3:64 -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.35 -z 00:26:18:5c:af:32 -i eth0 -j ACCEPT

[3:84] -A llpwip -s 172.20.1.40 -z 00:05:5d:6a:78:6c -i eth0 -j ACCEPT

[2:56] -A llpwip -s 172.20.1.41 -z 00:0b:2f:06:61:d7 -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.47 -z 00:0c:29:2e:7c:ea -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.50 -z 00:e0:4c:f8:78:43 -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.51 -z 00:17:c4:34:5d:0f -i eth0 -j ACCEPT

[2:56] -A llpwip -s 172.20.1.53 -z 00:03:0d:be:c0:15 -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.55 -z 00:0d:61:9a:53:09 -i eth0 -j ACCEPT

[2:56] -A llpwip -s 172.20.1.56 -z 00:e0:0c:77:24:c7 -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.57 -z 00:1e:68:e8:a0:55 -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.59 -z 00:16:ea:e8:6a:2c -i eth0 -j ACCEPT

[4:112] -A llpwip -s 172.20.1.58 -z 00:40:d0:7c:d1:b1 -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.60 -z 00:1f:3a:08:22:f5 -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.65 -z 00:0e:35:5c:6a:dc -i eth0 -j ACCEPT

[3:84] -A llpwip -s 172.20.1.66 -z 00:03:0d:af:5f:1d -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.67 -z 00:23:54:d0:e4:2a -i eth0 -j ACCEPT

[2:56] -A llpwip -s 172.20.1.68 -z 00:05:5d:6a:5c:4b -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.70 -z 00:03:0d:bf:cd:c2 -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.71 -z 00:03:0d:bf:0c:6e -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.73 -z 00:23:cd:ae:ba:90 -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.75 -z 70:1a:04:22:5e:b5 -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.88 -z 00:1d:ba:76:75:c4 -i eth0 -j ACCEPT

[0:0] -A llpwip -s 172.20.1.89 -z 00:22:fb:bf:24:54 -i eth0 -j ACCEPT

[0:0] -A llpwip  -i eth0 -z 172.20.1.0/24  -j ACCEPT(注意这里是个DROP)

COMMIT

# Completed on Thu Nov 12 13:01:14 2009