Blocking (as in -j DROP or REJECT) IP addresses at the network layer (the most efficient and most safe way BTW) prohibits any communication further up the network stack, meaning these requests neve... [by unspawn]
on 06/16/2013 – Made popular on 06/16/2013
As I understand from the ISO-OSI model, MAC addresses operate on a different layer than IP addresses. This is clear to me.
I can accept that Ethernet (LAN) just does not make use of IP addresses to do communication, but uses MAC addresses. I understand that these MAC addresses cannot be used for routing outside of a LAN, as they are not hierarchically defined.