Kotrola mac nebo ip

[Martin Duda]

Zahalka Martin Ing. napsal(a):

>Byl by nejaky priklad? 
>
>diky 
>
>  
>
Treba takto:

iptables -N MAC_DROP
iptables -F MAC_DROP

MAC_LIST="
    00:11:22:33:44:55 \
    01:12:23:34:45:56"

for MAC in $MAC_LIST; do
    iptables -A  MAC_DROP -m mac --mac-source $MAC -j LOG --log-level 
info --log-prefix "MAC blacklist: " -m limit --limit 1/m
    iptables -A  MAC_DROP -m mac --mac-source $MAC -j DROP
done

iptables -A MAC_DROP -j RETURN
...
iptables -A INPUT -j MAC_DROP
...

Podobne tak s IP adresou.

viz: http://www.linuxguruz.com/

Duda