On 08/14/07 07:28, pankaj jain wrote: > I tried arptables -A INPUT ! -i eth1 --opcode Request -d 10.19.1.102 > -j DROP but it was not working. when i do the "arptables -L -nvx" it > shows: > > -j DROP -i eth1 -o !* -d 10.19.1.102 --opcode 1 , pcnt=0 -- bcnt=0 (I'm betting that there is a logic to syntax mapping problem that is preventing this from working.) Can you get the rule to work with out any interfaces defined, i.e. get it to block on all interfaces? If you can get this to work it should be trivial to add the correct interface. Grant. . . .