From: Martijn Lievaart <m@rtij.nl>
To: "Gerard París Aixalà" <gerard.paris@estudiants.urv.cat>
Cc: netfilter@lists.netfilter.org
Subject: Re: Filtering MAC addresses and Multicast
Date: Wed, 02 Aug 2006 09:23:09 +0200 [thread overview]
Message-ID: <44D052DD.3060103@rtij.nl> (raw)
In-Reply-To: <44D05188.3040506@estudiants.urv.cat>
Gerard París Aixalà wrote:
> Martijn Lievaart wrote:
>
>> Gerard París Aixalà wrote:
>>
>>> Hello all,
>>>
>>> /sbin/iptables -t mangle -A PREROUTING -m mac --mac-source
>>> 00:06:5B:12:C9:7A -j DROP
>>> /sbin/iptables -t mangle -A PREROUTING -m mac --mac-source
>>> 00:06:5B:13:4A:69 -j DROP
>>>
>>> These rules drop Unicast traffic but they do not drop Multicast
>>> traffic.
>>
>>
>> Multicast traffic is sent to specific multicast MAC adresses.
>> Learn how multicast works and drop the corresponding MAC addresses.
>> (No I don't have a link handy, tcp/ip illustrated would be a good,
>> but pricy source).
>>
>> HTH,
>> M4
>>
>
> I know how multicast works, but I want to drop packets with the
> specified MAC source adresses. In multicast, the source address is
> always a real one, to identify which computer the packet came from
> (the destination address, both MAC and IP, is a special one).
<blush> Oops, my bad. Should read better. Sorry, Can't help you there.
If you don't get a reply on this list in a few days, maybe ask
netfilter-devel, because this looks like a bug.
M4
next prev parent reply other threads:[~2006-08-02 7:23 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-08-01 8:35 Filtering MAC addresses and Multicast Gerard París Aixalà
[not found] ` <44CFB3EE.2010007@rtij.nl>
2006-08-02 7:17 ` Gerard París Aixalà
2006-08-02 7:23 ` Martijn Lievaart [this message]
2006-08-02 9:40 ` Gáspár Lajos
2006-08-02 11:55 ` Gerard París Aixalà
2006-08-02 12:12 ` Gáspár Lajos
2006-08-02 16:04 ` Gerard París Aixalà
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=44D052DD.3060103@rtij.nl \
--to=m@rtij.nl \
--cc=gerard.paris@estudiants.urv.cat \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox