在/etc/sysctl.conf中添加:

net.bridge.bridge-nf-call-ip6tables = 1

net.bridge.bridge-nf-call-iptables = 1

 

[root@localhost ~]# cat /etc/sysctl.conf

net.bridge.bridge-nf-call-ip6tables = 1

net.bridge.bridge-nf-call-iptables = 1

 

执行sysctl -p 时出现:

[root@localhost ~]# sysctl -p

sysctl: cannot stat /proc/sys/net/bridge/bridge-nf-call-ip6tables: No such file or directory

sysctl: cannot stat /proc/sys/net/bridge/bridge-nf-call-iptables: No such file or directory

 

 

解决方法:

[root@localhost ~]# modprobe br_netfilter

[root@localhost ~]# ls /proc/sys/net/bridge

bridge-nf-call-arptables bridge-nf-filter-pppoe-tagged

bridge-nf-call-ip6tables bridge-nf-filter-vlan-tagged

bridge-nf-call-iptables bridge-nf-pass-vlan-input-dev

 

[root@localhost ~]# sysctl -p

net.bridge.bridge-nf-call-ip6tables = 1

net.bridge.bridge-nf-call-iptables = 1