[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: iptables MAC addresses



On Mon, Aug 25, 2008 at 4:02 PM, Stefano Cislaghi <s.cislaghi@gmail.com> wrote:
> 2008/8/25 Jim Popovitch <yahoo@jimpop.com>:
>> Hi,
>>
>> I'm using iptables -j LOG to log blocked/throttled connections.  These
>> log entries contain the source and destination MAC addresses... which
>> will always be the MAC addrs of the single apache box and it's
>> upstream switch. ;-)   Is there any way to tell iptables to *not* log
>> MAC addresses?
>
> You should use argv:
>
>  --mac-source !address

:-)  Perhaps I wasn't clear enough.  I do want the log entries... I
just don't want the log entries to contain the MAC addresses (which
are useless to me because they are the same regardless of where the IP
traffic.   The host has 1 interface attached to an upstream Foundry,
so the MACs will always be the same.

-Jim P.


Reply to: