Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I set the iptables rules in default.

iptables -P INPUT ACCEPT
iptables -P FORWARD DROP

How will allow a certain mac address in a forward chain? I tried this code:

iptables -A FORWARD -m mac --mac-source 00:00:00:00:00:a00 -j ACCEPT

but it won't work.

When I set all iptables chain by default to ACCEPT and block a certain mac address will work.

iptables -I FORWARD 1 -m mac --mac-source 00:00:00:00:00:00 -j DROP
share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.