iptables mac address filtering not work
Posted
by
Tony Lee
on Ask Ubuntu
See other posts from Ask Ubuntu
or by Tony Lee
Published on 2012-03-26T03:31:48Z
Indexed on
2012/03/26
5:42 UTC
Read the original article
Hit count: 258
I block every port default by ufw
and add iptables rules like this:
sudo iptables -A INPUT -p tcp --dport 1723 -m mac --mac-source 00:11:22:33:44:55 -j ACCEPT
then I list iptables INPUT rules:
sudo iptables -L INPUT --line-numbers
Chain INPUT (policy DROP)
num target prot opt source destination
1 ACCEPT udp -- anywhere anywhere udp dpt:domain
2 ACCEPT tcp -- anywhere anywhere tcp dpt:domain
3 ACCEPT udp -- anywhere anywhere udp dpt:bootps
4 ACCEPT tcp -- anywhere anywhere tcp dpt:bootps
5 ufw-before-logging-input all -- anywhere anywhere
6 ufw-before-input all -- anywhere anywhere
7 ufw-after-input all -- anywhere anywhere
8 ufw-after-logging-input all -- anywhere anywhere
9 ufw-reject-input all -- anywhere anywhere
10 ufw-track-input all -- anywhere anywhere
11 ACCEPT tcp -- anywhere anywhere tcp dpt:1723 MAC 00:11:22:33:44:55
but I can't visit my server:1723
Is there sth wrong?
I use Ubuntu 11.10
© Ask Ubuntu or respective owner
