[LARTC] Filter MAC address

原文地址：http://mailman.ds9a.nl/pipermail/lartc/2002q4/006552.html

 

[LARTC] Filter MAC address

Julian Anastasov [email protected]
Sun, 22 Dec 2002 18:35:22 +0200 (EET)

• Previous message: [LARTC] Filter MAC address
• Next message: [LARTC] Craig Reeson/Servex is out of the office.
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

 

	Hello,

On Sun, 22 Dec 2002, Nickola Kolev wrote:

> > I need to classified the traffic by looking at the packet destination
> > and source MAC address. Can anyone here suggest ways to do this.
> >
> > I have read through the HOWTO documentation, from there I know that
> > U32 filter can only filter out IP or higher layer. May I know why U32
> > filter did not support datalink layer (MAC address)? Is it that when

	This is a lie.

> > packet entering TC, the datalink layer no longer there? Are there any
> > filter which can filter the MAC address?

	You can filter with U32 by src/dst MAC on ingress and
by dst MAC on egress. On egress the src MAC is replaced with
new one and there is no good reason to apply U32 filters for sender's
MAC.

> > Before this, I have successfully implement QoS through source and
> > destination IP address using CBQ. Here I would like to thanks LARTC
> > for the help.
> >
>
> Yes, you can do this, but using fw marking, not u32 classifier. Just

	Why not, just use negative offsets with U32 to access
the 14-byte eth frame header before the IP header:

Decimal Ofs	Description
-----------------------------------
-14:		DST MAC, 6 bytes
-8:		SRC MAC, 6 bytes
-2:		Eth PROTO, 2 bytes, eg. ETH_P_IP
0:		Protocol header (IP Header)

> search through the various
> netfilter extensions - you really can do miracles with them :))
>
> E-gards,
> Nickola

Regards

--
Julian Anastasov <[email protected]>

 

• Previous message: [LARTC] Filter MAC address
• Next message: [LARTC] Craig Reeson/Servex is out of the office.
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]