fw_limit/filter_mac.sh

25 lines
509 B
Bash
Executable File

#!/bin/sh
startstop=$1
if [ -z "$startstop" ]; then
startstop="start"
fi
table="INPUT"
macsrc=$(cat ./mac.txt)
case "$startstop" in
start)
for i in $macsrc; do
iptables -I ${table} -m mac --mac-source $i -m comment --comment "macfiltering" -j DROP
done
;;
stop)
macdel=$(iptables -S ${table} |grep macfiltering|sed -e 's/\ /\n/g'|grep mac-source -A 1 |grep :)
for i in $macdel; do
iptables -D ${table} -m mac --mac-source $i -m comment --comment "macfiltering" -j DROP
done
;;
esac