> hi list > here is a script that i want to use to block unauthorized MACs on my network. > but the problem is that its not blocking all other MACs that r not specified > in the script. plz help me out n telll wots the reaon of this you did not tell iptables to drop "all others". 11:22:33:44:55:66 is just _one_ MAC. Note, that it's enough to say iptables -P INPUT DROP iptables -A INPUT -j ACCEPT -m mac --mac-source $MAC (and the same for FORWARD) Jan Engelhardt -- | Alphagate Systems, http://alphagate.hopto.org/