If not possible, is there any workaround without affecting CPU performance?

iptables -A INPUT -p tcp --dport 80 -j DROP

1 Answer 1


If you don't use static ip but DHCP, you can filter on mac address in iptables. Something like :

iptables -A INPUT -p tcp --destination-port 80 -m mac --mac-source 00:0F:EA:91:04:07 -j ACCEPT

With your workstation mac address.

Have a look here : http://www.cyberciti.biz/tips/iptables-mac-address-filtering.html

Hope this help !

  • This will only work if both machines are in the same subnet.
    – mulaz
    Dec 11, 2013 at 13:35
  • @mulaz: wow bad...i didn't know that :( I use this in my job but you are right, hosts are in same subnet...
    – krisFR
    Dec 11, 2013 at 13:36
  • I did not test, but I believe it works. Perhaps any iptables workaround when not shared the same network?
    – Binyamin
    Dec 24, 2013 at 17:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.