# MAC protection

     if [ ! "$MAC_PROTECT" == "" ] then

      for i in `cat ${0%$START_FILE}rc.fire_mac | cut -d'#' -f1`

      do

        if [ ! `echo $i | grep eth` == "" ] || [ ! `echo $i | grep wlan` == "" ] || [ ! `echo $i | grep wifi` == "" ] then

       INTERFACE=`echo $i`

       iptables -N mac-protect-${INTERFACE}

       if [ "$MAC_PROTECT" == "yes" ] then

      iptables -A INPUT -i $INTERFACE -j mac-protect-${INTERFACE}

       fi

       iptables -A FORWARD -i $INTERFACE -j mac-protect-${INTERFACE}

       iptables -A mac-protect-${INTERFACE} -j DROP

   else

       IP=`echo $i | cut -d'-' -f1`

       MAC=`echo $i | cut -d'-' -f2`



       iptables -I mac-protect-${INTERFACE} 1 -s $IP -m mac --mac-source $MAC -j RETURN

   fi

      done

# ----------------------------------------

#       rc.fire_mac

# ----------------------------------------

# (ip-adres_mac)

#

eth0

10.0.1.11-00:00:FF:56:AC:00

10.0.1.21-00:50:8D:F1:57:1C

eth1

10.0.2.11-00:00:CF:56:AC:00

10.0.2.21-00:50:2D:F1:57:1C

iptables -N im

iptables -I FORWARD -i br0 -m state --state NEW -j im

iptables -A im -s 192.168.1.100 -m mac --mac-source xx:xx:xx:xx:xx:xx -j RETURN

iptables -A im -s 192.168.1.101 -m mac --mac-source 00:xx:38:xx:xx:47 -j RETURN

iptables -A im -s 192.168.1.102 -m mac --mac-source xx:xx:xx:xx:xx:xx -j RETURN

iptables -A im -s 192.168.1.103 -m mac --mac-source 32:45:66:55:42:xx -j RETURN

iptables -A im -j REJECT