From mboxrd@z Thu Jan 1 00:00:00 1970 From: Martijn Lievaart Subject: Re: Filtering MAC addresses and Multicast Date: Wed, 02 Aug 2006 09:23:09 +0200 Message-ID: <44D052DD.3060103@rtij.nl> References: <44CF1266.5090109@estudiants.urv.cat> <44CFB3EE.2010007@rtij.nl> <44D05188.3040506@estudiants.urv.cat> Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: In-Reply-To: <44D05188.3040506@estudiants.urv.cat> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="iso-8859-1"; format="flowed" To: =?ISO-8859-1?Q?Gerard_Par=EDs_Aixal=E0?= Cc: netfilter@lists.netfilter.org Gerard Par=EDs Aixal=E0 wrote: > Martijn Lievaart wrote: > >> Gerard Par=EDs Aixal=E0 wrote: >> >>> Hello all, >>> >>> /sbin/iptables -t mangle -A PREROUTING -m mac --mac-source >>> 00:06:5B:12:C9:7A -j DROP >>> /sbin/iptables -t mangle -A PREROUTING -m mac --mac-source >>> 00:06:5B:13:4A:69 -j DROP >>> >>> These rules drop Unicast traffic but they do not drop Multicast >>> traffic. >> >> >> Multicast traffic is sent to specific multicast MAC adresses. >> Learn how multicast works and drop the corresponding MAC addresses. >> (No I don't have a link handy, tcp/ip illustrated would be a good, >> but pricy source). >> >> HTH, >> M4 >> > > I know how multicast works, but I want to drop packets with the > specified MAC source adresses. In multicast, the source address is > always a real one, to identify which computer the packet came from > (the destination address, both MAC and IP, is a special one). Oops, my bad. Should read better. Sorry, Can't help you there. If you don't get a reply on this list in a few days, maybe ask netfilter-devel, because this looks like a bug. M4