>You can filter by mac addresses with the module mac > >a sample could be > >iptables -A FORWARD -m mac --mac-source ff:ff:ff:ff:ff:ff -j DROP For true MAC filtering you need ebtables. Jan Engelhardt -- | Gesellschaft fuer Wissenschaftliche Datenverarbeitung Goettingen, | Am Fassberg, 37077 Goettingen, www.gwdg.de