Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here. |
| Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
 |
GNU/Linux Basic Guide
This 255-page guide will provide you with the keys to understand the philosophy of free software, teach you how to use and handle it, and give you the tools required to move easily in the world of GNU/Linux. Many users and administrators will be taking their first steps with this GNU/Linux Basic guide and it will show you how to approach and solve the problems you encounter.
Click Here to receive this Complete Guide absolutely free. |
|
 |
11-16-2005, 12:31 AM
|
#1
|
|
Member
Registered: Oct 2005
Location: MN
Distribution: Slack, Slamd64
Posts: 33
Rep:
|
Iptables/Mac address
Hey, I'm using iptables and currently they block everything and allow my computers from our office into our servers via IP addresses. to shh/ftp at home I have a cable hookup and my ip address is constantly changing. I would like to add a rule to allow my computer in, I've been looking into creating a rule that would allow me via Mac address.
********************
/sbin/iptables -A INPUT -p tcp --syn -m mac --mac-source XX:XX:XX:XX:XX:XX --destination-port 22 -j ACCEPT
********************
I've tried this using the mac address obtained from ipconfig /all and the one from arp -a.
neither one allow me into the server via ssh. I'm wondering if I'm not getting the proper mac address or if iptables dosen't work that way. has anyone encountered this and does anyone have a solution?
Thanks
J
|
|
|
|
11-16-2005, 07:21 AM
|
#2
|
|
LQ Veteran
Registered: Feb 2003
Location: Maryland
Distribution: Slackware
Posts: 7,756
|
Quote:
|
to shh/ftp at home I have a cable hookup and my ip address is constantly changing. I would like to add a rule to allow my computer in, I've been looking into creating a rule that would allow me via Mac address.
|
I don't think this is going to work. If I remember correctly, MAC addresses aren't preserved as the packets wander around the internet.
|
|
|
|
11-16-2005, 11:36 PM
|
#3
|
|
Member
Registered: Apr 2003
Distribution: RH 8
Posts: 246
Rep:
|
DyDNS
Look into a dynamic dns name from a free provider like dyndns. I am not exactly sure of your situation but this will solve your problem of a changing ip addr.
|
|
|
|
11-17-2005, 05:57 AM
|
#4
|
|
Member
Registered: Oct 2004
Location: Romania
Distribution: Ubuntu server, FreeBsd
Posts: 444
Rep:
|
You can't use your MAC address for filtering because MAC address is changed by every router between your cable modem/router and you server at work. You MAC address is available only between your computer and the first router. Every router between source and destination replace the source mac address with his own mac.
You could use dyndns or something like this and filter by IP (dns name).
|
|
|
|
| Thread Tools |
Search this Thread |
|
|
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT -5. The time now is 07:09 PM.
|
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|