Sun, 22 Jul 2001 11:26:15 +0200
> What do you mean by --mac-destination? Are you talking about being
> able to match Ethernet packets based on their destination MAC address?
Yes, that's what I meant.
> If so, then AFAIK I believe it could be implemented, but why would
> you want a feature like that?
We would like to control incomming and outgoing packets from a special NI=
have fixed ip-addresses. The '--mac-source feature' together with=20
--destination give's us great control over outgoing packets but currently=
we've no possibility to check incomming packets except for their ip-addre=
I wonder if the destination MAC address is already known by the netfilter=
framework at the time the packet traverses the forward chain.