[linux] iptables a MAC adresy

[Rastislav Nedorost]

Vdaka vsetkym za pomoc. Napriek tomu, ze mac adresy sa daju menit (ale
na "M$ oknach" trochu tazsie), je toto riesenie postacujuce.
Pri praktickej realizacii vsak mam problem - na 

iptables -A INPUT -m mac -mac-source 00:11:22:33:44:55 -j drop

mi iptables vynada:

"Couldn't load match 'ac-source':/lib/iptables/libipt_ac-source.so:
Cannot open shared object file: No such file or directory"

Pozeral som - na disku naozaj danu kniznicu nemam. V jadre linuxu 
V jadre mam zapnutu opsnu CONFIG_IP_NF_MATCH_MAC ako modul. Kde sa
da ziskat uvedena kniznica (google ani rpmfind,zda sa, nic o nej
nevedia)? Alebo robim nejaku blbost, na ktoru iptables reaguju takto?

Rasto


-----Original Message-----
From: linux-admin na lists.linux.sk [mailto:linux-admin na lists.linux.sk] On
Behalf Of Tomas Hoger
Sent: Wednesday, October 01, 2003 11:22 AM
To: linux na lists.linux.sk
Subject: Re: [linux] iptables a MAC adresy

On Wed, Oct 01, 2003 at 10:28:57AM +0200, Rastislav Nedorost wrote:
> ci iptables podporuje vo svojich pravidlach filtrovanie podla MAC
adresy. 
pozri si kernel config, v casti networking options -> netfilter
configuration je opsna CONFIG_IP_NF_MATCH_MAC
help k nej: MAC matching allows you to match packets based on the source
Ethernet address of the packet.