On 5/31/2012 13:19, Jan Engelhardt wrote:
On Thursday 2012-05-31 19:14, Miller, Shao wrote:
I would like to filter Spanning-Tree Protocol data units, which have
a common destination MAC address. Is filtering based on a
destination MAC address possible, or only based on a source MAC address?
It is indeed possible to check for source and/or destination MAC
address for STP packets.
Thanks a lot, Jan. My guess is that a certain vendor is using netfilter
"underneath", so I was trying to figure out why their firewalls had the
ability to filter based on source MAC, but not destination. So I've no
idea.
Have a pleasant day.
- Shao Miller
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html