mac match

mac match

[Robert Gil]

when using the -m mac match.... does it match the mac address based on the 
last hop... or the source of the sender's mac? is the mac address stored in 
the header of a packet from the original sender?

~Rob

_________________________________________________________________
Lose those love handles! MSN Fitness shows you two moves to slim your waist. 
http://fitness.msn.com/articles/feeds/article.aspx?dept=exercise&article=et_pv_030104_lovehandles

Re: mac match

[Antony Stone]

On Saturday 24 April 2004 1:02 am, Robert Gil wrote:

> when using the -m mac match.... does it match the mac address based on the
> last hop... or the source of the sender's mac?

MAC addresses are always the last hop.

> is the mac address stored in
> the header of a packet from the original sender?

No - it is in the ethernet frame header, which only exists between two 
machines directly connected using ethernet.

If two machines A and B are connected via a router, then the router will know 
the MAC addresses for A and B, and A will know the MAC address of the router, 
but not the MAC address of B.

If you don't have an ethernet link (or something very similar, such as 
802.11b) then there aren't any MAC addresses at all (eg: PPP).

Regards,

Antony.

-- 
"I estimate there's a world market for about five computers."

 - Thomas J Watson, Chairman of IBM

                                                     Please reply to the list;
                                                           please don't CC me.