Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Marcelus Trojahn <trojahn@alternativa.com.br>
To: netfilter@lists.netfilter.org
Subject: Logging MAC
Date: Fri, 21 May 2004 10:39:58 -0300	[thread overview]
Message-ID: <5390820828.20040521103958@alternativa.com.br> (raw)

Folks,

  I have an outdoor wireless network and I only accept FORWARD packets
  when  the  IP  address  matchs  with  the  MAC  address I have on my
  iptables rules... (Bad english sorry)

  For example:
  iptables -j ACCEPT -A FORWARD -i eth1 -s 10.10.10.80 -m mac --mac-source 00:40:F4:93:40:82

  iptables -j LOG  -A FORWARD -i eth1 $pref "[rule 06]"
  iptables -j DROP -A FORWARD -i eth1

  Any  other  connection  that  doesn't  match  the  IP+MAC  rules are
  dropped (or at least I think it was :)).

  The  problem  is:  Recently  I noticed a large traffic (MRTG) on the
  access points that doesn't seem to match with traffic of the clients
  connected  to  it...  Looks  like  someone  are being able to bypass
  iptables  rules.  So,  I  want  to know if there is a way to the LOG
  target logs the MAC address of the connection too...

  Sorry about my english... I hope you can understand me...

-- 
Marcelus Trojahn





             reply	other threads:[~2004-05-21 13:39 UTC|newest]

Thread overview: 12+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-05-21 13:39 Marcelus Trojahn [this message]
2004-05-21 13:53 ` Logging MAC Antony Stone
2004-05-21 14:17   ` Re[2]: " Marcelus Trojahn
2004-05-21 14:34     ` Antony Stone
2004-05-21 15:07       ` Re[4]: " Marcelus Trojahn
2004-05-21 15:25         ` Antony Stone
2004-05-22  1:47           ` Alistair Tonner
2004-05-22  9:06             ` Antony Stone
2004-05-22 12:09               ` Alistair Tonner
2004-05-22 12:33                 ` Antony Stone
2004-05-22 15:57                   ` Alistair Tonner
2004-05-22 16:17                     ` Antony Stone

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=5390820828.20040521103958@alternativa.com.br \
    --to=trojahn@alternativa.com.br \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox