hi, all! I am trying to use '-m mac' for match. Client machine mac is: 00:00:E4:95:6B:48 . However, i saw the following log on the server: (using log-ip-options) IPTABLES INPUT ILLEGAL: IN=eth0 OUT= MAC=00:a0:cc:28:56:c4:00:09:b6:13:9a:7c:08:00 SRC=155.66.220.73 DST=173.23.214.22 LEN=88 TOS=0x00 PREC=0x00 TTL=124 ID=4708 DF PROTO=TCP SPT=1292 DPT=22 WINDOW=64164 RES=0x00 ACK PSH URGP=0 The MAC display in log is really strange(the length is much longer), can any one explain? Thank you ------------------------------------