[rawkusx]

Hi,

I currently am using the following to rules to block all outbound access to the IPS below:

iptables -I FORWARD -s 173.194.219.0/24 -j DROP
iptables -I FORWARD -s 74.125.141.0/24 -j DROP
iptables -I FORWARD -s 208.74.76.0/24 -j DROP
iptables -I FORWARD -s 64.233.185.0/24 -j DROP
iptables -I FORWARD -s 198.70.71.0/24 -j DROP

-- I want to modify the rule so that, the logic applies to a SPECIFIC mac address or IP. (I'll take whichever is easiest at this point.) I'm hitting a brick wall, but here's what I've attempted so far.

iptables -I FORWARD -s 173.194.219.0/24 -m mac --mac-source E0:E7:82:F1:63:35 -j DROP
iptables -I FORWARD -s 74.125.141.0/24 -m mac --mac-source E0:E7:82:F1:63:35 -j DROP
iptables -I FORWARD -s 208.74.76.0/24 -m mac --mac-source E0:E7:82:F1:63:35 -j DROP
iptables -I FORWARD -s 64.233.185.0/24 -m mac --mac-source E0:E7:82:F1:63:35 -j DROP
iptables -I FORWARD -s 198.70.71.0/24 -m mac --mac-source E0:E7:82:F1:63:35 -j DROP


When I try the mac filter, I can still access all of the ips above. When I use the catch all then, no one can. (Great, but not great. lol)

By the way, for those that are using iptables have you noticed that you have to reboot the router sometimes, before the changes will take affect?

Any help is appreciated. Thank you.