Linux Netfilter discussions
 help / color / mirror / Atom feed
From: ads nat <adsnat@yahoo.com>
To: Logechnik Alexandr <A.Logechnik@itak.ua>, netfilter@lists.netfilter.org
Subject: Re: problem using MAC address.
Date: Wed, 27 Oct 2004 04:14:58 -0700 (PDT)	[thread overview]
Message-ID: <20041027111458.39741.qmail@web60405.mail.yahoo.com> (raw)
In-Reply-To: <417FA5A2.9080204@itak.ua>

I want to allow access to -d 202.63.167.193 and deny
to all other destination. 
Solutins you have given will restrict access to port
25 at all destinations.

Thanks for support.

--- Logechnik Alexandr <A.Logechnik@itak.ua> wrote:

> ads nat wrote:
> 
> >Hi,
> >I want block forwarding as follows :
> >
> >"iptables -I INPUT 1 -i eth1 -p tcp -m tcp --dport
> 25
> >-m mac --mac-source 00:08:A1:53:BE:71 -d ! 10.0.0.2
> -j
> >DROP"
> >
> >it does not work but when I try to do same thing
> with
> >rule 
> >"iptables -D FORWARD -i eth1 -p tcp -m tcp --dport
> 25
> >-s 192.168.0.42 -d ! 10.0.0.2 -j DROP"
> >
> >Is there any sytax error.
> >
> >Or Do I have to installed any additional module of
> >iptables.
> >I am using Redhat 9.0 Linux.
> >Please guide me.
> >
> >Thanks for support.	
> >
> Sorry, for the fulless answer.
> 
> You not need:
> iptables -I INPUT 1 -i eth1 -p tcp --dport 25 -m mac
> --mac-source 
> 00:08:A1:53:BE:71 -j DROP
> 
> You need:
> iptables -A FORWARD -p tcp --dport 25 -m
> --mac-source 00:08:A1:53:BE:71 
> -j DROP
> 
> -- 
> wbr, Logechnik Alexandr
> 
> In God we trust, but something 
> else must have X.509 certificate
> 
> 
> 



		
__________________________________
Do you Yahoo!?
Yahoo! Mail Address AutoComplete - You start. We finish.
http://promotions.yahoo.com/new_mail 


      reply	other threads:[~2004-10-27 11:14 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-10-27  9:50 problem using MAC address ads nat
2004-10-27 12:57 ` Ложечник Александр
2004-10-27 13:24 ` Jason Opperisano
2004-10-27 13:41 ` Logechnik Alexandr
2004-10-27 11:14   ` ads nat [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20041027111458.39741.qmail@web60405.mail.yahoo.com \
    --to=adsnat@yahoo.com \
    --cc=A.Logechnik@itak.ua \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox