I am struggling to create a bridge firewall with iptables since I cannot find/catch packets flowing through a bridge with two interfaces in centos7. No ip addresses are configured on interfaces or the bridge. I cannot seem to find this traffic, checked PREROUTING INPUT FORWARD OUTPUT POSTROUTING chains. Although ifconfig counters shows that traffic is flowing through bridged interfaces but not the bridge(br0) itself.
My bridge config
# cat ifcfg-br0 DEVICE=br0 TYPE=Bridge BOOTPROTO=none IPADDR=0.0.0.0 PREFIX=24 IPV6_AUTOCONF=no IPV6INIT=no ONBOOT=yes DELAY=0`
# cat ifcfg-p1p DEVICE=p1p1 TYPE=Ethernet HWADDR=XX:XX:XX:XX:XX:XX ONBOOT=yes BRIDGE=br0 BOOTPROTO=none IPV6INIT=no IPV6_AUTOCONF=no IPADDR=0.0.0.0 PREFIX=24`
# cat ifcfg-p1p2 DEVICE=p1p2 TYPE=Ethernet HWADDR=XX:XX:XX:XX:XX:XX BOOTPROTO=none ONBOOT=yes BRIDGE=br0 IPV6INIT=no IPV6_AUTOCONF=no IPADDR=0.0.0.0 PREFIX=24`
Forwarding is disabled(no NAT), firewalld is disabled, ipv6 autoconf is disabled in sysctl.conf. Traffic is flowing perferctly from a machine inside p1p2 towards outside through p1p1.
I am stuck and any help is appreciated.
PS: This setup worked perfectly with debian 5 (2.6 kernel)but after an upgrade to debian 6 or 7 or 8, got kernel panic on interface drivers randomly. Tried both Intel card and Broadcom card with same result. A bug in brctl maybe? But anyways centos7 is running at least stable for two days.