Re: Filtering MAC addresses and Multicast

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Gerard París Aixalà wrote:
I tried this.
And this:
iptables -t mangle -I PREROUTING -d 225.0.0.4 -j DROP # 225.0.0.4 is the multicast address
iptables -t mangle -I PREROUTING -j DROP
But the multicast traffic still arrives at the destination computer.
How do you know that the traffic arrives ??? :) If you see it with some sniffer programs (tetheral) then that is fake because those programs see the packets BEFORE they reach the filtering system.
You can not tell a packet not to enter your network card... :D

BTW.: What does the counters of the packets matching your rules says ??? (iptables -L -v -n -t mangle)



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux