iptables 1.4.1 mac module doesn't work (error message), Fedora Core 8

JFNash · 11-25-2010, 07:29 AM

I use iptables firewall (v1.4.1) installed on FC8. I'm trying to limit the inflow traffic for the port 1723 to certain MAC addresses. To experiment with the mac option, I've written the following iptables rule:

Quote:

iptables -A INPUT -m -mac --mac-source 10:08:08:08:08:10 -j ACCEPT

It didn't work. It gave me this error message:

Quote:

iptables v1.4.1: Couldn't load match `-mac':/usr/local/libexec/xtables/libipt_-mac.so: cannot open shared object file: No such file or directory

Try `iptables -h' or 'iptables --help' for more information.

Does that mean the mac module wasn't installed/enabled?

How to go about that?

Thanks in advance!

ruckus_laci · 11-25-2010, 09:15 AM

There's plus one -mac in it.
Try this:

iptables -A INPUT --mac-source 10:08:08:08:08:10 -j ACCEPT

JFNash · 11-25-2010, 09:25 AM

Quote:

Originally Posted by ruckus_laci

There's plus one -mac in it.
Try this:

iptables -A INPUT --mac-source 10:08:08:08:08:10 -j ACCEPT

Thanks for your input. I've tried your suggestion before to no avail.

I took the syntax of the command from iptables manual. Surprisingly I couldn't locate a single similar issue on the interweb. I read something about having to recompile the kernel to include any additional iptables options. But the post's accuracy couldn't be verified.

ruckus_laci · 11-26-2010, 02:24 AM

Quote:

Originally Posted by JFNash

Thanks for your input. I've tried your suggestion before to no avail.

I took the syntax of the command from iptables manual. Surprisingly I couldn't locate a single similar issue on the interweb. I read something about having to recompile the kernel to include any additional iptables options. But the post's accuracy couldn't be verified.

Yes, you're right. There are different syntaxes on every pages

But a found a new one

iptables -A INPUT -m mac --mac-source 00:0F:EA:91:04:08 -j ACCEPT

http://www.cyberciti.biz/tips/iptabl...filtering.html

JFNash · 11-26-2010, 10:51 AM

You know, I think I've mistakenly (and stupidly) added an unnecessary dash before the mac switch. Though I'd be too embarrassed, I hope this is the problem.

I'll try that out tomorrow when I go to office. I'll report back.