I've been dealing with ebtables recently. To test if it works at all I set policy to drop on chains: input, output and forward for one of the interfaces. However, it doesn't work as I can ping a host connected to that interface. I use Debian which may be a reason of the problem since I needed to install some packages that should be "built in" (for example syslog). Maybe I need to run some additional configuration for ebtables.

I tried also iptables which work properly. However, for my task I need to use ebtables (MAC NAT).

Do you have any suggestions?

Artur Stepniak

Post your ebtables config so we can help. Its not something ive worked with before, but might have some insight for you