iptables for blocking one computer

Turtel · #1 9th July 2011, 01:54 PM

Friends the following shall block a particular machine in the same network, what can be done if it is dynamic IP
and from other network?

iptables -A INPUT -s 192.168.0.0/24 -m mac --mac-source 00:50:8D:FD:E6:32 -j DROP

flyingfsck · #2 9th July 2011, 02:06 PM

The MAC is (almost) guaranteed to be unique, so you need not filter on the IP address.

fpmurphy · #3 9th July 2011, 02:22 PM

I agree. Even if the IP address changes, the MAC address should not. However, if they know that they are doing, they can spoof the MAC address. All bets are off if this the case.

Turtel · #4 10th July 2011, 11:46 AM

If the computer does not have static IP I don't think it could be blocked by mac address if it is from another network we need to block a IP range to block it......if I am correct........