CentOS 6 ELRepo kernel bridge issues

bridgecentos

I'm currently running the following Kernel on CentOS 6.6 from ELRepo

[root@de14 ~]# uname -r

4.0.4-1.el6.elrepo.x86_64

Anything related to a bridge doesn't work, what I've come to understand is CentOS runs sysctl.conf before the bridge is come up

echo 1 > /proc/sys/net/bridge/bridge-nf-call-iptables

/proc/sys/net/bridge/bridge-nf-call-iptables: No such file or directory

There's nothing under,

-bash: cd: /proc/sys/net/bridge: No such file or directory

But br0 which is a bridge on eth0 works fine, what would be the best way to get the usual bridge capabilities back (bridge-nf-call-iptables) and the like ?

Best Answer

In recent kernels, the /proc/sys/net/bridge collection of sysctls is provided by the br_netfilter module. When your system boots, you may see a message like this from the kernel:

bridge: automatic filtering via arp/ip/ip6tables has been deprecated. 
Update your scripts to load br_netfilter if you need this.

For example:

# ls /proc/sys/net/bridge
ls: cannot access /proc/sys/net/bridge: No such file or directory
# modprobe br_netfilter
# ls /proc/sys/net/bridge
bridge-nf-call-arptables  bridge-nf-filter-pppoe-tagged
bridge-nf-call-ip6tables  bridge-nf-filter-vlan-tagged
bridge-nf-call-iptables   bridge-nf-pass-vlan-input-dev
Related Topic