Re: [PLUG] iptables question

["Michael C. Toren" <mct@toren.net>]

On Sat, Mar 06, 2004 at 09:53:42PM -0500, John Lavin wrote:
> Hi all - want to set up a pretty locked down couple of iptables rules to
> block all traffic except for a few specific mac addresses for a wireless
> hub.

Try something along the lines of the following:

   # Do not forward by default
   iptables -P FORWARD DROP

   # Forward for specific MAC addresses
   iptables -A FORWARD -i eth1 -m mac --mac-source C0:FF:EE:C0:FF:EE -j ACCEPT
   iptables -A FORWARD -i eth1 -m mac --mac-source DE:AD:BE:EF:DE:AD -j ACCEPT

However, please keep in mind that MAC addresses are spoofable...

HTH,
-mct
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug