Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'm trying to set a rule so that computers that connect to my network need to be added to an iptables rule list before they are granted access to the modem (internet).

My network is currently:

MODEM----->Server----->Switch------>PCS

I'm currently trying to use the rule:

iptables --policy FORWARD DROP

iptables -A FORWARD -d 192.168.1.1 -m mac --mac-source 78:e4:00:8e:fe:63 -j ACCEPT

Connections to 192.168.1.1 (modem) are blocked, but the accept rule doesn't allow connections from that mac address to reach 192.168.1.1. The server has two network interfaces that are bridged (eth0 and eth1).

share|improve this question
    
What about working out your ACCEPT RATE ? meta.stackexchange.com/questions/5234/… –  Prix Sep 12 '10 at 3:19
    
Please accept your other questions' answers. There's a checkbox outline under the answer's vote count. Clicking the arrow will accept the question. –  Rob Olmos Sep 12 '10 at 3:20
    
Rob Olmos: Done, didn't even know that was there! –  glisignoli Sep 12 '10 at 3:25

1 Answer 1

up vote 2 down vote accepted

Pretty sure you need to be using ebtables when working with a bridge interface like that. Take a peek into that, but that's probably where you want to go.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.