Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Antony Stone <Antony@Soft-Solutions.co.uk>
To: Netfilter-List <netfilter@lists.netfilter.org>
Subject: Re: MAC addres and iptables
Date: Sun, 29 Feb 2004 13:55:16 +0000	[thread overview]
Message-ID: <200402291355.16107.Antony@Soft-Solutions.co.uk> (raw)
In-Reply-To: <4041ED0A.9070001@stupar.homelinux.net>

On Sunday 29 February 2004 1:45 pm, Sasa Stupar wrote:

> Hi!
>
> I have a working router for my network. Is it possible to allow access
> to the router by defining a MAC address with iptables?
> So basically I need to allow only some users to access internet and not
> all. So I want to allow access only to users with certain MAC address
> and deny all others.
>
> Is this possible with iptables and how?

Try something like:

iptables -A INPUT -s a.b.c.d -m mac --mac aa:bb:cc:dd:ee:ff -j ACCEPT

Where a.b.c.d is the IP address and aa:bb:cc:dd:ee:ff is the MAC address of 
the machine you want to allow access to the firewall system.

You need to have compiled mac address matching into your kernel, or loaded the 
appropriate module.

See "man iptables" for more info.

Regards,

Antony.

-- 
The words "e pluribus unum" on the Great Seal of the United States are from a 
poem by Virgil entitled "Moretum", which is about cheese and garlic salad 
dressing.

                                                     Please reply to the list;
                                                           please don't CC me.



  reply	other threads:[~2004-02-29 13:55 UTC|newest]

Thread overview: 17+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-02-29 13:45 MAC addres and iptables Sasa Stupar
2004-02-29 13:55 ` Antony Stone [this message]
2004-02-29 14:06   ` Sasa Stupar
2004-02-29 14:14     ` MAC address " Antony Stone
2004-02-29 14:38     ` MAC addres " Sasa Stupar
2004-02-29 15:12       ` MAC address " Antony Stone
2004-02-29 15:40         ` Sasa Stupar
2004-02-29 15:55           ` Antony Stone
2004-02-29 16:02             ` Sasa Stupar
2004-02-29 16:14               ` David Cannings
2004-02-29 16:16               ` Antony Stone
2004-02-29 18:10                 ` Sasa Stupar
2004-02-29 21:44                   ` Sasa Stupar
2004-02-29 22:03                     ` Antony Stone
2004-03-01  6:27                       ` Sasa Stupar
2004-03-01  6:42                       ` Sasa Stupar
2004-03-01  9:34                         ` Sasa Stupar

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=200402291355.16107.Antony@Soft-Solutions.co.uk \
    --to=antony@soft-solutions.co.uk \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox