How set MAC address filtering on linux?

Question

I need to block any incoming connection from a MAC address different from a specific one (which is static and well known).

This MAC address should generate only non-IP connection: this is the reason why I don't know if ARPtables could be the best solution.

Any suggestion?

You'll have to provide more informations on the network setup, the current system's network configuration (interfaces...), the network protocols involved and the reason (rather than only the method) for having to block. Is this ARP (because arptables blocks only ARP, but you write non-IP which is not specific enough)? Without these additional informations an answer might miss important points. — A.B
– A.B, Commented Sep 21, 2020 at 11:10
I think this question ask here: serverfault.com/questions/519480/… — Amir Sabeghi
– Amir Sabeghi, Commented Sep 21, 2020 at 11:28
Is this NCP ie NetWare ? Or the transport protocol in OSI ? If it isn't ARP, SNA ? — Stefan Skoglund
– Stefan Skoglund, Commented Sep 21, 2020 at 11:43
I have an ETH interface with a static MAC address: this interface is used only for AVB, hence no ARP and IP. This interface is directly connected to another ETH interface with a well-know static MAC address. My primary goal is to block any connection from different MAC address and connections with EtherType in Ethernet Frame different from the AVB one. — Vilos
– Vilos, Commented Sep 22, 2020 at 5:21
I didn't know about AVB.... reading the description of it : big hops and complexity to make 802.3 do that TokenBus did early on... but market forces and competition.... — Stefan Skoglund
– Stefan Skoglund, Commented Sep 22, 2020 at 9:44

Pablo A · Accepted Answer · 2024-07-10 21:36:30Z

0

You can do it with this command:

 iptables -A INPUT -m mac --mac-source 12:34:56:78:9A:BC -j DROP

just replace 12:34:56:78:9A:BC with the mac address that you want to block.

Pablo A

3,2651 gold badge26 silver badges46 bronze badges

answered Sep 21, 2020 at 11:35

Amir Sabeghi

991 silver badge8 bronze badges

1 Answer 1