Mac Filtering Help Needed

[mad_daddy]

Hi All
I have set up a Mac filter on one of my guest networks and it works perfectly.
The problem is that I have a script that also schedules this network on and off and reboots the router during the night.
When the network is back online the mac filter reset back to the default (disable) instead of staying on 'reject'.

Instead of using this route, I was thinking of seting up an iptable/ebtable script rule to permanently block this mac instead (on guest network).

Could anyone help with such a rule please?

 

[tsunami2311]

could just set the router use it built in reboot nightly it will have same effect, unless your turning off wifi for set period of time at night

 

[mad_daddy]

@tsunami2311 - i have both my networks up so that i can set them for guests and kids.
Each on these networks have timed profiles, so i have set up a reboot script.

Regarding my issue above, i have nearly got my solution.
The script i am using is:
iptables -I FORWARD -m mac --mac-source AA:BB:CCD:EE:FF -j DROP
iptables -I INPUT -m mac --mac-source AA:BB:CCD:EE:FF -j DROP

just need to refine this so that only one network blocks the mac, not all of them.
If i use this:
iptables -I FORWARD -i br3 -m mac --mac-source AA:BB:CCD:EE:FF -j DROP
iptables -I INPUT -i br3 -m mac --mac-source AA:BB:CCD:EE:FF -j DROP

all the networks block my mac, not on one specified one.

Will play with the code, and post when i get this working

As a bonus, if i change the DROP to ACCEPT, then i can allow the mac access without reboot the router!!!