Hello, Andrew Beverley a écrit : > > Set your default policy to drop: > > iptables -t mangle -P FORWARD DROP > > Then set up a rule for each client that matches both IP address and MAC: > > iptables -t mangle -A FORWARD -s 1.2.3.4 \ > -m mac --mac-source aa:aa:aa:aa:aa:aa -j ACCEPT The 'mangle' table is not intended for filtering. The 'filter' table is. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
