Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to set a rule so that computers that connect to my network need to be added to an iptables rule list before they are granted access to the modem (internet).

My network is currently:


I'm currently trying to use the rule:

iptables --policy FORWARD DROP

iptables -A FORWARD -d -m mac --mac-source 78:e4:00:8e:fe:63 -j ACCEPT

Connections to (modem) are blocked, but the accept rule doesn't allow connections from that mac address to reach The server has two network interfaces that are bridged (eth0 and eth1).

share|improve this question
What about working out your ACCEPT RATE ?… – Prix Sep 12 '10 at 3:19
Please accept your other questions' answers. There's a checkbox outline under the answer's vote count. Clicking the arrow will accept the question. – Rob Olmos Sep 12 '10 at 3:20
Rob Olmos: Done, didn't even know that was there! – glisignoli Sep 12 '10 at 3:25
up vote 2 down vote accepted

Pretty sure you need to be using ebtables when working with a bridge interface like that. Take a peek into that, but that's probably where you want to go.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.