2009/11/5 Rakotomandimby Mihamina <mihamina@xxxxxxxxxx>: > We would like to ensure one IP adress is used by the assigned MAC. > (QoS matter) > > Is this a good enough solution: > -A INPUT -m mac --mac-source 00:15:C5:F4:29:7C -s ! 192.168.1.13 -j REJECT > -A FORWARD -m mac --mac-source 00:15:C5:F4:29:7C -s ! 192.168.1.13 -j REJECT > > Is there any better one? Use ipsets, probably macipmap. Karel -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html