Re: problem using MAC address.

[Logechnik Alexandr <A.Logechnik@itak.ua>]

ads nat wrote:

>Hi,
>I want block forwarding as follows :
>
>"iptables -I INPUT 1 -i eth1 -p tcp -m tcp --dport 25
>-m mac --mac-source 00:08:A1:53:BE:71 -d ! 10.0.0.2 -j
>DROP"
>
>it does not work but when I try to do same thing with
>rule 
>"iptables -D FORWARD -i eth1 -p tcp -m tcp --dport 25
>-s 192.168.0.42 -d ! 10.0.0.2 -j DROP"
>
>Is there any sytax error.
>
>Or Do I have to installed any additional module of
>iptables.
>I am using Redhat 9.0 Linux.
>Please guide me.
>
>Thanks for support.	
>
Sorry, for the fulless answer.

You not need:
iptables -I INPUT 1 -i eth1 -p tcp --dport 25 -m mac --mac-source 
00:08:A1:53:BE:71 -j DROP

You need:
iptables -A FORWARD -p tcp --dport 25 -m --mac-source 00:08:A1:53:BE:71 
-j DROP

-- 
wbr, Logechnik Alexandr

In God we trust, but something 
else must have X.509 certificate