I don't recommend it, but I guess it is possible to filter them on the nat prerouting chain instead if you really must have the MAC address recorded... -----Original Message----- From: Antonio Paulo Salgado Forster [mailto:aforster@xxxxxxxxxx] Sent: Tuesday, July 15, 2003 1:06 PM To: netfilter@xxxxxxxxxxxxxxxxxxx Subject: logging mac address Hello all, Is there any known way to log the mac address for packets blocked on the forward table just like in the input table? I've been searching the archives and documentations but found nothing so far. Thanks in advance. Forster