<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<font size="-1"><font face="Helvetica, Arial, sans-serif">Hello,<br>
<br>
Instead of using iptables directly can't you use a bash/perl script
between so that <br>
you can add the left zero to complete the mac ? <br>
<br>
Get the ISC ma string split the string by : check if it has length of
2 digits if no place a zero on the left<br>
concatenate everything again and move it to iptables.<br>
<br>
Best Regards,<br>
FR<br>
</font></font><br>
Em 11-10-2010 10:42, Sławomir Paszkiewicz escreveu:
<blockquote
cite="mid:AANLkTimeS+7Um+tTqdZE_Ctd6Du7th7Lnq=LaT2D05LT@mail.gmail.com"
type="cite">
<pre wrap="">Hello,
I`m trying to migrate from DNSMasq to ISC DHCP because of failover.
My problem is that MAC Addresses (hardware) are in different format than
iptables accept (i`m executing script via execute() which call iptables
-A FORWARD -m mac --mac-source .... -j ACCEPT).
In ISC DHCP logs format is correct:
DHCPREQUEST for 10.59.146.180 from 00:d0:b8:0c:ba:d8 via eth0
But 'hardware' (i`m using binary-to-ascii(16, 8, ":",
substring(hardware,1, 6));) gives me:
0:d0:b8:c:ba:d8 which is incorrect for iptables:
# iptables -A FORWARD -m mac --mac-source 0:d0:b8:c:ba:d8 -s
10.59.146.180 -j ACCEPT
iptables v1.4.4: Bad mac address "0:d0:b8:c:ba:d8"
My question is how to get correct (for iptables) format (same as in dhcp
logs) ?
Best regards,
paszczus
_______________________________________________
dhcp-hackers mailing list
<a class="moz-txt-link-abbreviated" href="mailto:dhcp-hackers@lists.isc.org">dhcp-hackers@lists.isc.org</a>
<a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/dhcp-hackers">https://lists.isc.org/mailman/listinfo/dhcp-hackers</a>
</pre>
</blockquote>
</body>
</html>