MAC address filtering of iptables

Here (http://en.wikipedia.org/wiki/Mac_address) has some information about the MAC address.

 

1. Stop all communications between hosts whose MAC address is XX:

Iptables-A input-M Mac -- Mac-source XX: XX-J Drop

2. Allow the MAC address to be XX: XX host to access port 22:

Iptables-A input-p tcp -- destination-port 22-M Mac -- Mac-source XX: XX-J accept

 

3. allow communication between hosts whose IP address is 192.168.1.21 and whose MAC address is XX: XX, and reject other hosts:

Iptables-A input-s 192.168.1.21-M Mac -- Mac-source XX: XX-J accept

Iptables-P input drop

 

4. You can write a script to restrict Mac:

Iptables-P forward drop

For Mac in $ (cat ipaddressfile); do

Iptables-a forward-M Mac -- Mac-source $ Mac-J accept

Done