> Hello , > can we do IP/MAC filering through iptables.. Yes, you can match the source/destination IP address and/or source MAC address. Examples: # iptables -A FORWARD -s 10.20.30.40 -j REJECT # iptables -A OUTPUT -d 10.12.13.14 -j LOG # iptables -A FORWARD -m mac --mac-source 00:01:23:45:67:89 -j ACCEPT # iptables -A FORWARD -m mac --mac-source ! 00:01:23:45:67:89 -j REJECT Please read # iptables -m mac --help # iptables --help And whatever comes to your mind, the modules have their own help messages. # iptables -p tcp --help # iptables -m state --help etc... Regards, Maciej
