Re: MAC/IP PAIR MATCH

[Boryan Yotov <yotov@prosyst.com>]

Iwan Fauzie wrote:
> Hello,
> 
> I would like to patch mac/ip pair match, how to do that? any body help me
> 

If you want to match IP against MAC address, then check the iptables's 
_mac_ match:

# iptables -m mac -help

Example: rule for forwarding packets matching certain IP/MAC pair is:

# iptables -A FORWARD -s <IP _address> -m -mac --mac-source <MAC 
address> -j ACCEPT

... but if you want to "patch a match", then you need to specify a bit 
more detailed what are you trying to do.

The _mac_ match exist into the default iptables source (./extensions) 
e.g. you don't need to patch anything. Just install iptables and enable 
the match inside your kernel's .config file (CONFIG_IP_NF_MATCH_MAC=y) 
and finally recompile (and install) the new kernel.