Re: MAC address and iptables

[Antony Stone <Antony@Soft-Solutions.co.uk>]

On Sunday 29 February 2004 2:06 pm, Sasa Stupar wrote:

> Antony Stone pravi:
> >
> >Try something like:
> >
> >iptables -A INPUT -s a.b.c.d -m mac --mac aa:bb:cc:dd:ee:ff -j ACCEPT

> Thanx for the answer. Since I am new to linux and iptables: how do I
> know if mac address matching is compiled or not in the kernel

Try the above command and see whether it is accepted.   If it is, you have the 
required support compiled in or loaded as a module.   If it isn't, you'll get 
an error such as "iptables: No chain/target/match by that name".

> and what is the responsible module?

Sorry, I can't answer that for certain because I don't use modules, however I 
would guess it's called "mac".   Perhaps someone else can confirm/correct 
this.

Regards,

Antony.

-- 
The first fifty percent of an engineering project takes ninety percent of the 
time, and the remaining fifty percent takes another ninety percent of the 
time.

                                                     Please reply to the list;
                                                           please don't CC me.