1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

How to limit certain MACs access to internal lan but allow then to wan access

Discussion in 'Tomato Firmware' started by kenyloveg, Sep 1, 2009.

  1. kenyloveg

    kenyloveg LI Guru Member

    Hi, Guys
    I'm trying to figure out how to limit certain MAC address to access internal lan address, but allow them to access outside via wan.
    Here are the scripts I've already added to firewall
    Code:
    iptables -D FORWARD -i br0 -j ACCEPT
    iptables -A FORWARD -i br0 -j ACCEPT
    iptables -A wanout -i br0 -m mac --mac-source XX:XX:XX:XX:XX:XX -j ACCEPT
    iptables -A wanout -i br0 -d www.shjtaq.com -j ACCEPT
    iptables -A wanout -i br0 -p udp --dport 8000 -j ACCEPT
    iptables -A wanout -i br0 -p tcp --dport 443 -j ACCEPT
    iptables -A wanout -i br0 -j DROP
    Could somebody help me to add the scripts but compatible with my original code?
    Thanks.
     

Share This Page