Re: MAC/IP PAIR MATCH

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Iwan Fauzie wrote:
Hello,

I would like to patch mac/ip pair match, how to do that? any body help me


If you want to match IP against MAC address, then check the iptables's _mac_ match:

# iptables -m mac -help

Example: rule for forwarding packets matching certain IP/MAC pair is:

# iptables -A FORWARD -s <IP _address> -m -mac --mac-source <MAC address> -j ACCEPT

... but if you want to "patch a match", then you need to specify a bit more detailed what are you trying to do.

The _mac_ match exist into the default iptables source (./extensions) e.g. you don't need to patch anything. Just install iptables and enable the match inside your kernel's .config file (CONFIG_IP_NF_MATCH_MAC=y) and finally recompile (and install) the new kernel.



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux