<citaat van="System Admin"> > hello all > > I have an dhcp server and i want to block a particular mac address (that > pc is virus infected) from using my dhcp service so that it will not get > any valid ip address. > The DHCP server operates on a lower level than iptables. You'll never achieve this with iptables rules alone. The solution is very easy. Hardwire the mac address to some IP in the dhcp server. Use 127.0.0.1 or something similarly unusable. M4