pls support Filter MAC with iptables

[manhte1]

Hi all, pls support me about iptables with this topology:

Net1----------------SW layer3---------------iptables FW ----------Net3
...................... ..................Net2.........................

this FW need to filter PC from net1 --> net3 with MAC address, but iptablesFW only read MAC of SWLayer3.

So what can I do to resolve: Filter MAC from Net1 when connect to Net3 ???

Thanks for your support!
t

[Lazydog]

The short answer is you cannot do this with IPTABLES as all packets crossing the switch will have the MAC of the the switch. What you would need to do is setup an ACL on the SWlayer3 for this.