[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

RE: iptables by mac



> iptables -A INPUT -m mac --mac-source 00:0F:EA:91:04:08 -j DROP

i would like to do using FORWARD
example


iptables -A FORWARD -s -m ! 00:0F:EA:91:04:08 -d 0.0.0.0/0 -p tcp --dport
3128 -j DROP

0.0.0.0/ 0 means any network on port 3128

cose im having trouble with cloning computers here

:)

i want to set this rule to avoid the computer being cloned
i think using mac & iptables i can solve this rigth ?

give an idea if what i wrote is ok
or just lend me a hand:)




>
> -----Original Message-----
> From: Luis [mailto:itachi@cnt.uo.edu.cu]
> Sent: Friday, 9 June 2006 3:21 PM
> To: debian-firewall@lists.debian.org
> Subject: iptables by mac
>
> hi there
>
> i m setting some new rules in my firewall and i would like to know if ifs
> dooable
> the next thing
>
> example iptables -a ! computermac-addrees -d anynetwork -j DROP
>
>
> IS THAT doable?
>
>
>
> -------------------------------------------------
>                            Luis A. Rondon Paz
>     L I N U X       .~.    Admin intranet CNT
>    The  Choice      /V\    icq #132736035
>     of a GNU       /( )\   itachi@cnt.uo.edu.cu
>    Generation      ^^-^^    Santiago de cuba
>                    UONET
> -------------------------------------------------
>
>
>
> --
> To UNSUBSCRIBE, email to debian-firewall-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org
>
>
>
>


-- 
-------------------------------------------------
                           Luis A. Rondon Paz
    L I N U X       .~.    Admin intranet CNT
   The  Choice      /V\    icq #132736035
    of a GNU       /( )\   itachi@cnt.uo.edu.cu
   Generation      ^^-^^    Santiago de cuba
                   UONET
-------------------------------------------------




Reply to: