Re: Filtering MAC addresses and Multicast

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Martijn Lievaart wrote:
Gerard París Aixalà wrote:

Hello all,

/sbin/iptables -t mangle -A PREROUTING -m mac --mac-source 00:06:5B:12:C9:7A -j DROP /sbin/iptables -t mangle -A PREROUTING -m mac --mac-source 00:06:5B:13:4A:69 -j DROP

These rules drop Unicast traffic but they do not drop Multicast traffic.

Multicast traffic is sent to specific multicast MAC adresses.
Learn how multicast works and drop the corresponding MAC addresses. (No I don't have a link handy, tcp/ip illustrated would be a good, but pricy source).

HTH,
M4


I know how multicast works, but I want to drop packets with the specified MAC source adresses. In multicast, the source address is always a real one, to identify which computer the packet came from (the destination address, both MAC and IP, is a special one).

Gerard



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux