On Wed, 2004-09-15 at 05:56, Stephane Delcroix wrote: > Hi, > for a particular firewall, I need to match packet by mac-dest. > I didnt find anything neither in netfilter doc nor in the kernel > sources :( > > Is there a patch or an extension for netfilter to do that? > > regards, > > Stephane on a routing gateway; a destination MAC match is irrelevant, as the destination MAC will always be that of the local machine (this pretty much applies to a standalone host as well). destination MAC addresses are only really relevant to switches... anyways--i'm guessing you're probably trying to setup some sort of bridge--in which case, you need "ebtables" which is available at: http://ebtables.sourceforge.net/ and can match on destination MAC address. my other guess would be maybe you're looking to match broadcasts/multicasts, in which case--the pkttype match may be of some interest to you. -j -- Jason Opperisano <opie@xxxxxxxxxxx>