#BLACKLIST MAC ADDRESS ON WIFI MAC#

#BLACKLIST MAC ADDRESS ON WIFI MAC#

then you have rules to ACCEPT only the MAC addresses you want and DROP all others.You can prevent DHCP requests by blocking communication on these ports.Īppend one or more rules to the end of the selected chain. DHCP uses ports 67 and 68 and the UDP protocol.the raw table provides PREROUTING(for packets arriving via any network interface), -A appends the rule to your chain.There must be no target of that name already.

and create a new chain name to reference.Ĭreate a new user-defined chain by the given name.This option specifies the packet matching table which the command should operate on. It provides the following built-in chains: PREROUTING (for packets arriving via any network interface) OUTPUT (for packets generated by local processes) -t, -table table It registers at the netfilter hooks with higher priority and is thus called before ip_conntrack, or any other IP tables. Raw: This table is used mainly for configuring exemptions from connection tracking in combination with the NOTRACK target. Iptables -t raw -A DHCP_clients -m mac -mac-source -j ACCEPT Iptables -t raw -A PREROUTING -p udp -dport 67 -j DHCP_clients

# Incoming DHCP, pass to chain processing DHCP In lieu of MAC Address list, some WiFi routers allow users block unrecognized devices by adding them to a Blacklist with the click of a button. Turn off the DHCP server on your network so that the client will need to configure a static IP address to access the network. # Create the DHCP_clients chain in the 'raw' table Or, to prevent a wireless repeater connecting to your AP, you can use the Access Control with Black List policy, do an AP Discovery scan, and add all the nearby AP's MAC Address into the blacklist. You can try using iptables to filter by MAC address.

Blacklist mac address on wifi