LAB --------| eth1 RHEL5U1) eth0 |-------LAN



eth0=192.168.100.100/24
eth1=192.168.1.10/24
windows client=192.168.1.15/24 ,share folder name="windows share"

I have 2 network install in RHEL5U1.I have windows system install in LAB sharing a folder name "windows share".I mount the windows share under linux system then I share it to LAN windows client (samba).
1. I want to limit certain client in LAN(eth0) to access the share folder using mac address while allowing all LAB(eth1) client to access the linux samba share.I have writing the iptables script.But seem like not working at all.Please help !

script:
#!/bin/sh
#default policy
echo "Flushing Firewall and Deleting Chains"

iptables -F icmp_packets
iptables -t nat -X

iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP


#Allow Ext traffic
iptables -A INPUT -m mac –mac-source 00:23:B3:28:C8:97 -i eth0 -j ACCEPT
iptables -A INPUT -m mac –mac-source 00:2C:23:2F9:34 -i eth0 -j ACCEPT
iptables -A INPUT -m mac –mac-source 00:1C:BF:99:B5:98 -i eth0 -j ACCEPT
iptables -A INPUT -m mac –mac-source 00:1C:23:2F:15:06 -i eth0 -j ACCEPT
iptables -A INPUT -m mac –mac-source 00:1C:BF:85:32:34 -i eth0 -j ACCEPT
iptables -A INPUT -m mac –mac-source 00:1C:23:2K9:CC -i eth0 -j ACCEPT
iptables -A INPUT -m mac –mac-source 00:1C:BF:89:76:27 -i eth0 -j ACCEPT

#Allow Int traffic
iptables -A INPUT -s 192.168.1.0/24 -i eth1 -j ACCEPT

I think you should use the FORWARD chain.
Do you have to use MAC based filter - MACs can easily be changed.
Assuming the computers are getting their adresses via dhcp - you can assign them specific adresses by their MAC adress - and use IP based filters instead of MAC in your script.