Greetings all, I am wondering how to do a MAC-based filtering for a NAT: iptables -P FORWARD DROP iptables -A FORWARD -m mac --mac-source xxxxxxxx -j ACCEPT the above things will not work, is there a way to achieve this? thanks! Cheers, Deephay - To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html