nixCraft

Tawfiq · #1 (**permalink**) 13-07-2009, 12:33 PM

Hello there,
this is what i use to match both IP and MAC to deny access.

Code:

iptables -A INPUT -p tcp -s 192.168.1.200 -m mac --mac-source 00:0F:EA:91:04:08 -j DROP

Now.. this is what i want to do.
* I would like to have a different file including the Matching IP and MAC addresses. and would like my firewall to deny access to any other combination to access the internet.

Q. what do i have to write in my firewall script.
Q. Please give me an example what should be the file like which consists the IP+MAC combination

Thanking you in advance,
Tawfiq

nixcraft · #2 (**permalink**) 13-07-2009, 06:21 PM

Create two files ip.deny.txt:

Code:

192.168.1.2
192.168.2.5
202.54.1.0/24

mac.deny.txt:

Code:

00:0F:EA:91:04:08
00:0F:EA:91:04:03

Make changes as follows in your iptables shell script:

Code:

#!/bin/bash
IPDENY=/path/to/ip.deny.txt
MACDENY=/path/to/mac.deny.txt

for i in $IPDENY
do
  iptables -A INPUT -p tcp -s $i -j DROP
done 

for m in $MACDENY
do
 iptables -A INPUT -p tcp -m mac --mac-source $m -j DROP
done

Tawfiq · #3 (**permalink**) 14-07-2009, 09:24 AM

hey man thats fantastic !! I will try it right away and will let you know how things are going with it.

Tawfiq · #4 (**permalink**) 14-07-2009, 11:49 AM

Well.. something went wrong somewhere.
this is what i get when i run the script now,

Code:

[root@gateway ~]# sh /root/scripts/firewall
iptables v1.3.5: invalid mask `ip.deny.txt' specified
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.3.5: Bad mac address `/root/scripts/mac.deny.txt'
Try `iptables -h' or 'iptables --help' for more information.

and i put the right paths,

Code:

IPDENY=/root/scripts/ip.deny.txt
MACDENY=/root/scripts/mac.deny.txt

Tawfiq · #5 (**permalink**) 02-08-2009, 07:53 AM

any insight at all about this please?

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
How do I connect two computers together to access the Internet?	ibolah	Computer Networking and Internet/broadband	3	14-10-2009 10:31 AM
IPtables - IP & MAC combined rule to define internet access	Tawfiq	Networking, Firewalls and Security	2	11-08-2009 11:04 PM
[Solved] ipTables rule to block a port for all internal IP Addresses except one	pranaysharmadelhi	Networking, Firewalls and Security	2	14-07-2009 09:49 PM
Iptables Two ISP Load Balancing Internet Connection	please	Networking, Firewalls and Security	2	23-06-2009 11:25 AM
unable to access ftp server via Internet explorer	satishap	Web servers	1	14-09-2008 09:26 PM

nixCraft

IPtables MAC & IP rule for internet access

IPtables MAC & IP rule for internet access

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Similar Threads