From: Eray Aslan <eray.aslan@caf.com.tr>
To: Daniel Drake <dsd@laptop.org>
Cc: netfilter@vger.kernel.org
Subject: Re: filtering based on MAC address prefix
Date: Sat, 16 Jan 2010 11:55:54 +0200 [thread overview]
Message-ID: <4B518D2A.2040905@caf.com.tr> (raw)
In-Reply-To: <818423da1001151144m5d7b698dh2c7ed2a108a0489c@mail.gmail.com>
On 15.01.2010 21:44, Daniel Drake wrote:
> I'm interested in setting up iptables filtering rules based on the OUI
> (i.e. first 3 bytes) of the source MAC address. Is this possible?
>
> I see that there is a "mac" match extension but it only seems to
> operate with full 6-byte addresses. I also looked at the u32 extension
> but that only seems to operate on the TCP header, not on the ethernet
> header.
>
> Any ideas/suggestions?
ebtables(8) is usually the better tool to use for dealing with ethernet
frames. Check if its --source and among matches fits.
--
Eray
next prev parent reply other threads:[~2010-01-16 9:55 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-01-15 19:44 filtering based on MAC address prefix Daniel Drake
2010-01-16 9:55 ` Eray Aslan [this message]
2010-01-16 15:43 ` Pascal Hambourg
2010-01-16 16:37 ` Daniel Drake
2010-01-16 17:10 ` Eray Aslan
2010-01-16 20:46 ` Maximilian Wilhelm
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4B518D2A.2040905@caf.com.tr \
--to=eray.aslan@caf.com.tr \
--cc=dsd@laptop.org \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.