Can i refuse connection from a specific network card?

[jomski]

Hi,
i'd like to know if it's possible to refuse connection from a machine on my lan by blocking the network card using it's mac address. can I use iptables to achieve this?
Reason for asking is that I would like to, from time to time, block certain machines on my network from having access to the internet. when i tried using ip addresses, some smart colleagues simply changed their ip addresses to another in the pool.
Will appreciate any help in this area.

Thanks.

[ronaldjayr_jover]

Sir you can block the MAC Address of that specific PC. Even if they replace the IP they cannot replace the MAC Address, so that you will not change your rules from time to time. You can use this :

#iptables -A INPUT --mac-source <MAC ADDRESS> -j DROP

[jomski]

Hi,
I tried the suggested command but it did not work. Keep telling me that the --mac-source is an invalid argument. Sure the syntaz is right?
I need help desperately.

Thanks