Re: Block/Accept by MAC Address

["Hanz F." <hanz852@yahoo.com>]

Your situation is similar to mine, and this is what I
did :

******************************************
#eth0 has the IP 192.168.3.133 which is connected 
#to the internet.

iptables -t nat -P POSTROUTING DROP
iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to
192.168.3.133


iptbales -P INPUT DROP
iptbales -P FORWARD DROP
iptbales -P OUTPUT ACCEPT

#list here all your clients who are allowed to hace
#access

iptables -A INPUT -p all -s client -m mac --mac-source
client's mac -j ACCEPT
iptables -A FORWARD -p all -s client -m mac
--mac-source client's mac -j ACCEPT

#then block anyone else
iptables -A INPUT -p all -s 0/0 -j DROP
iptables -A FORWARD -p all -s 0/0 -j DROP

************************************************

U can also allow all people and block the buy u want
but in this case he may change his network card and
will be able to have access again.

The problem here (and with every iptables rule) that
ur clients will not be able to use some internet
applications like ICQ, IRC,yahoo messenger ,...... and
that's what I am looking for.
Some guys here have informed me that it's posiible to
use IRC and FTP by using related modules, but it seems
there's no modules to other applications.





__________________________________________________
Do you Yahoo!?
New DSL Internet Access from SBC & Yahoo!
http://sbc.yahoo.com