On Sunday 29 February 2004 2:06 pm, Sasa Stupar wrote: > Antony Stone pravi: > > > >Try something like: > > > >iptables -A INPUT -s a.b.c.d -m mac --mac aa:bb:cc:dd:ee:ff -j ACCEPT > Thanx for the answer. Since I am new to linux and iptables: how do I > know if mac address matching is compiled or not in the kernel Try the above command and see whether it is accepted. If it is, you have the required support compiled in or loaded as a module. If it isn't, you'll get an error such as "iptables: No chain/target/match by that name". > and what is the responsible module? Sorry, I can't answer that for certain because I don't use modules, however I would guess it's called "mac". Perhaps someone else can confirm/correct this. Regards, Antony. -- The first fifty percent of an engineering project takes ninety percent of the time, and the remaining fifty percent takes another ninety percent of the time. Please reply to the list; please don't CC me.