Iptables Tutorial 1.2.2

Mac match

The MAC (Ethernet Media Access Control) match can be used to match packets based on their MAC source address. As of writing this documentation, this match is a little bit limited, however, in the future this may be more evolved and may be more useful. This match can be used to match packets on the source MAC address only as previously said.

Note Do note that to use this module we explicitly load it with the -m mac option. The reason that I am saying this is that a lot of people wonder if it should not be -m mac-source, which it should not.

Table 10-21. Mac match options

Match--mac-sourceKernel2.3, 2.4, 2.5 and 2.6Exampleiptables -A INPUT -m mac --mac-source 00:00:00:00:00:01ExplanationXX:XX:XX:XX:XX:XX