On Monday 2012-06-18 17:34, Shao Miller wrote: > On 5/31/2012 13:19, Jan Engelhardt wrote: >> On Thursday 2012-05-31 19:14, Miller, Shao wrote: >>> I would like to filter Spanning-Tree Protocol data units, which have a common >>> destination MAC address. Is filtering based on a destination MAC address >>> possible, or only based on a source MAC address? >> It is indeed possible to check for source and/or destination MAC address for >> STP packets. > > Thanks a lot, Jan. My guess is that a certain vendor is using netfilter > "underneath", so I was trying to figure out why their firewalls had the ability > to filter based on source MAC, but not destination. So I've no idea. They probably have a lame web interface that just does not show the destination field. It certainly is possible with the ebtables command line tool. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
