Layer 2 Filtering

raja1979 · 12-22-2005, 06:54 AM

I want to filter the Packets at layer 2 , can any one tell me weather it is possible using Iptables ,

Or PLease Tell me how it is possible.

Matir · 12-22-2005, 08:23 AM

iptables can be used to filter packets based on MAC addresses.

raja1979 · 12-24-2005, 12:25 AM

The Packets which i am getting only contain Ethernet header (Source MAc , Dest Mac , Protocol) , i have tried using Iptables but it does not filters the packets .
i think iptables works on layer 3 .

Please Suggest me some answers

Matir · 12-24-2005, 12:35 AM

Actually, though intended for ethernet bridging, it seems the ebtables interface should do what you need.

enthusiast_abdul · 12-24-2005, 03:14 AM

u can't do it using IP tables. they work at L3. why don't you write a simple ethernet bridge for this purpose.

scowles · 12-25-2005, 09:47 AM

I could be mistaken here, but I always thought MAC addresses could be specified using iptables just so long as your kernel is compiled with CONFIG_IP_NF_MATCH_MAC support.