On Sun, 2003-11-30 at 14:32, Leonardo Rodrigues Magalhães wrote: > AFAIK, iptables can use some 'layer 2' information such as MAC Address > for doing some filtering in some tables, but it CANT be used for filtering > those 'layer 2' packets. That means iptables CANNOT modify ARP/RARP > behavior. You can choose to ignore them, by initializing the interface with a 'ifconfig -arp', but this will disable all ARP functionality forcing you to use manual entries. That's sort of like filtering. ;-) C