On Fri, 2002-10-25 at 15:31, Maarten Vink wrote: > As far as I know, there's an iptables module that allows you to match on > MAC addresses. I've seen it several times when compiling a new kernel... > Haven't used it yet though. > Yeah there is: CONFIG_IP_NF_MATCH_MAC Then you can do things like: iptables -A in-eth0 -m mac --mac-source 00:11:22:33:44:55 -j refuse Regards, Teun Vink