> > > > Set your default policy to drop: > > > > iptables -t mangle -P FORWARD DROP > > > > Then set up a rule for each client that matches both IP address and MAC: > > > > iptables -t mangle -A FORWARD -s 1.2.3.4 \ > > -m mac --mac-source aa:aa:aa:aa:aa:aa -j ACCEPT > > The 'mangle' table is not intended for filtering. The 'filter' table is. Ooops, I meant filter. Been using the mangle table too much recently :) Andy -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
