Hi everyone... First thanks for such a useful forum. Here's my question. I try to set up a mac filter for the wired interface of a WRT54G running OpenWrt (latest). (I don't use the WRT wifi interface, just the great linux features / Radius / Chillispot) As users will be configuring MAC security by themselves, I tried to bind the ports of the ethernet switch behind the eth1 (Wifi) interface, modifying the correct NVRAM parameters. No way. Then I set up a nvram variable called "lan_macmode" to deny and a "lan_maclist" which contains the MAC adresses that I want to deny. Again, no success. 1) Did somebody managed to do that ? 2) I can do what I want using iptables, but I'd like to know if there's a good interface to use with it. Thanks by advance for your answers. T.