From mboxrd@z Thu Jan 1 00:00:00 1970 From: "M. Ziya Ozudogru" Subject: Re: mac/ip match Date: 18 Sep 2003 22:04:37 +0300 Sender: netfilter-admin@lists.netfilter.org Message-ID: <1063911877.19096.16.camel@tux> References: <1063909559.19096.12.camel@tux> <1063911472.844.7.camel@elendil.intranet.cartel-securite.net> Mime-Version: 1.0 Content-Transfer-Encoding: 8bit Return-path: In-Reply-To: <1063911472.844.7.camel@elendil.intranet.cartel-securite.net> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="utf-8" To: Cedric Blancher Cc: netfilter@lists.netfilter.org Thanks for your help but how can i assure that given mac is using the ip i assign to it? And if it is using its assigned ip it should pass if it is not it should be blocked On Thu, 2003-09-18 at 21:57, Cedric Blancher wrote: > Le jeu 18/09/2003 à 20:26, M. Ziya Ozudogru a écrit : > > Here comes the problem.. How can i define in iptables to use these arp > > rules and give access only the one addresses that match the rules and > > should block all the others ( well i want to block the others [unused ip > > addresses by using iptables mac macth module ] ) . ? Any hints ? > > See mac match : > > cbr@elendil:~$ iptables -m mac --help > [...] > MAC v1.2.8 options: > --mac-source [!] XX:XX:XX:XX:XX:XX > Match source MAC address > > Now, you just have to implement rules matching source mac address and > source IP address.