On Tue, 21 Jul 2009 14:05:43 +0200, Fabio Marcone <fabio.marcone@xxxxxxx> wrote: > Hi! > I have a router linux and I need to filter packets in postrouting chain > using source mac address. But... in postrouting chain, what is source > mac address? mac address of effective source of the packet or router > interface mac address ? > > Thanks in advance, > Fabio Hi Fabio, I don't think you can filter packets in postrouting. The only tables available in POSTROUTING are mangle and nat. To filter packets in a router, I think you have to do it in the FORWARD chain. see: http://jengelh.medozas.de/images/nf-packet-flow.png Julien -- julien http://jve.linuxwall.info/blog -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html