betolj / ndpi-netfilter

GNU General Public License v2.0
126 stars 69 forks source link

Drop a protocol/application for a specific mac address #83

Open chirayu-patel opened 3 years ago

chirayu-patel commented 3 years ago

I am currently filtering bridged traffic. so net.bridge.bridge-nf-call-iptables is enabled. net.bridge.bridge-nf-call-iptables=1

I am trying to filter youtube app but only for a specific mac address but its not working.. I tried few other like netflix, skype.. They all work okay with mac address combination but not youtube.. Youtube only works standalone.. as soon as we combine it with mac address filter, it stops working.

Interestingly the youtube domain gets blocked ok.

For example,

iptables -I FORWARD -m ndpi --youtube -m mac --mac-source aa:bb:cc:dd:ee:ff -j DROP even tried, iptables -I FORWARD -m mac --mac-source aa:bb:cc:dd:ee:ff -m ndpi --youtube -j DROP

Please help