* iptables, voip, mac match
@ 2002-10-11 8:04 Gavin
2002-10-11 9:49 ` Robert P. J. Day
0 siblings, 1 reply; 4+ messages in thread
From: Gavin @ 2002-10-11 8:04 UTC (permalink / raw)
To: netfilter
hello,
just reporting a funny one:
One of our clients was trying to use a VOIP application through a linux
gateway (iptables-1.2.3). The client had a MAC address of a:b:c:d:e:f and an
IP address of 1.2.3.4
When I used this rule on the gateway (FORWARD policy DROP):
iptables -A INPUT -i eth1 -m mac --mac a:b:c:d:e:f -j ACCEPT
- the client could not establish an audio channel to his VOIP
server
But when I used this line:
iptables -A INPUT -i eth1 -s 1.2.3.4 -j ACCEPT
- he could make calls fine.
Just in case anyone runs over this in future. It was unexpected, to say the
least. As far as I understand it, both lines should have worked.
Gavin
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: iptables, voip, mac match
2002-10-11 8:04 iptables, voip, mac match Gavin
@ 2002-10-11 9:49 ` Robert P. J. Day
2002-10-11 10:06 ` Gavin
0 siblings, 1 reply; 4+ messages in thread
From: Robert P. J. Day @ 2002-10-11 9:49 UTC (permalink / raw)
To: Gavin; +Cc: netfilter
On Fri, 11 Oct 2002, Gavin wrote:
> hello,
>
> just reporting a funny one:
>
> One of our clients was trying to use a VOIP application through a linux
> gateway (iptables-1.2.3). The client had a MAC address of a:b:c:d:e:f and an
> IP address of 1.2.3.4
>
> When I used this rule on the gateway (FORWARD policy DROP):
> iptables -A INPUT -i eth1 -m mac --mac a:b:c:d:e:f -j ACCEPT
--mac-source ???
> - the client could not establish an audio channel to his VOIP
> server
rday
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: iptables, voip, mac match
2002-10-11 9:49 ` Robert P. J. Day
@ 2002-10-11 10:06 ` Gavin
2002-10-11 10:27 ` Robert P. J. Day
0 siblings, 1 reply; 4+ messages in thread
From: Gavin @ 2002-10-11 10:06 UTC (permalink / raw)
To: Robert P. J. Day; +Cc: netfilter
> On Fri, 11 Oct 2002, Gavin wrote:
>
> > hello,
> >
> > just reporting a funny one:
> >
> > One of our clients was trying to use a VOIP application through a linux
> > gateway (iptables-1.2.3). The client had a MAC address of a:b:c:d:e:f
and an
> > IP address of 1.2.3.4
> >
> > When I used this rule on the gateway (FORWARD policy DROP):
> > iptables -A INPUT -i eth1 -m mac --mac a:b:c:d:e:f -j ACCEPT
>
> --mac-source ???
= same command, works as an
abbreviation.
>
> > - the client could not establish an audio channel to his VOIP
> > server
>
>
> rday
>
>
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: iptables, voip, mac match
2002-10-11 10:06 ` Gavin
@ 2002-10-11 10:27 ` Robert P. J. Day
0 siblings, 0 replies; 4+ messages in thread
From: Robert P. J. Day @ 2002-10-11 10:27 UTC (permalink / raw)
To: netfilter mailing list
On Fri, 11 Oct 2002, Gavin wrote:
> > On Fri, 11 Oct 2002, Gavin wrote:
> >
> > > hello,
> > >
> > > just reporting a funny one:
> > >
> > > One of our clients was trying to use a VOIP application through a linux
> > > gateway (iptables-1.2.3). The client had a MAC address of a:b:c:d:e:f
> and an
> > > IP address of 1.2.3.4
> > >
> > > When I used this rule on the gateway (FORWARD policy DROP):
> > > iptables -A INPUT -i eth1 -m mac --mac a:b:c:d:e:f -j ACCEPT
> >
> > --mac-source ???
>
> = same command, works as an
> abbreviation.
ah, something else that's not mentioned in the man page anywhere.
i *must* start making a list of these things. :-)
rday
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2002-10-11 10:27 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2002-10-11 8:04 iptables, voip, mac match Gavin
2002-10-11 9:49 ` Robert P. J. Day
2002-10-11 10:06 ` Gavin
2002-10-11 10:27 ` Robert P. J. Day
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).