--mac-destination

[Niklas Neumann]

Hello,

>    What do you mean by --mac-destination? Are you talking about being
> able to match Ethernet packets based on their destination MAC address?

Yes, that's what I meant.

> If so, then AFAIK I believe it could be implemented, but why would
> you want a feature like that?

We would like to control incomming and outgoing packets from a special NI=
C to=20
have fixed ip-addresses. The '--mac-source feature' together with=20
--destination give's us great control over outgoing packets but currently=
=20
we've no possibility to check incomming packets except for their ip-addre=
ss.

I wonder if the destination MAC address is already known by the netfilter=
=20
framework at the time the packet traverses the forward chain.


Best regards
  Niklas