Linux Netfilter discussions
 help / color / mirror / Atom feed
From: sean <seandarcy2@gmail.com>
To: netfilter@lists.netfilter.org
Subject: Re: how do I set the MAC address in POSTROUTING?
Date: Sun, 10 Dec 2006 11:44:15 -0500	[thread overview]
Message-ID: <457C395F.1000702@gmail.com> (raw)
In-Reply-To: <45704F1C.7070703@plouf.fr.eu.org>

Pascal Hambourg wrote:
> Hello,
> 
> sean a écrit :
>> Daniel Musketa wrote:
>>>
>>> AFAIK MAC addresses are used in ethernet to address ethernet frames. 
>>> On ip routed ppp0 no ethernet frames arrive.
>>
>> OK. If that's the case, then the --mac-source target would only work 
>> on a LAN, not over the ethernet.
> 
> I guess you mean over the *in*ternet. Ethernet is a LAN technology.
> 
>> This would mean thatthe --mac-sourse target has very limited use - 
>> only on local LANs.
> 
> Indeed, the scope of a MAC address is link local, limited to the LAN.
> 
>> But there is still a place for a MAC address.
> 
> On an IP/PPP link ? No way. A PPP interface has no MAC address, it is 
> useless. There is a place only in the lines that the LOG target prints 
> because they have a fixed format.
> 
>> How can I  put one in the packet on the client side? This would allow 
>> me to use it over the internet.
> 
> You cannot use MAC addresses over an IP/PPP link. You cannot rely on MAC 
> addresses over the internet either because this is layer 2 information 
> that is not routed by definition.
> 
> 

But I don't want to use the MAC address to route anything. I 
just want to stick it in the packet so _iptables_ will see it.

The internet routers just look at the ip address, so I 
wouldn't think they'd strip out the MAC address, do they?

If not, then if the client inserts a MAC address, couldn't 
iptables use it when it finally arrives.

sean



  reply	other threads:[~2006-12-10 16:44 UTC|newest]

Thread overview: 7+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2006-12-01  0:23 how do I set the MAC address in POSTROUTING? sean
2006-12-01  0:53 ` Daniel Musketa
2006-12-01 15:17   ` sean
2006-12-01 15:49     ` Pascal Hambourg
2006-12-10 16:44       ` sean [this message]
2006-12-10 19:52         ` Pascal Hambourg
2006-12-11  6:29         ` Cedric Blancher

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=457C395F.1000702@gmail.com \
    --to=seandarcy2@gmail.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox