iptables on MAC adress end user

[kmchen]

Hi

I'm travelling a lot and would like to open SSH ports on my servers for my personal computer's MAC address instead each time adapting my firewall to my new IP address.
Then I tried this:

Code: Select all

iptables -t filter -A INPUT  -p tcp --dport 22 -m mac --mac-source $MYMAC -j ACCEPT

But this doesn't work cause the WIFI router's MAC adress is received by the firewall, not my personal computers's MAC adress.

Any idea ?

[dilberts_left_nut]

MAC addressing is layer 2, and local only - your plan can't work.

Maybe look at port knocking if you don't want the port always open (although that's really not a big deal with key auth only).