In the business centre where I work, all clients are on the same network.
The Internet <--> building router <--> building network (including rogue DHCP, etc) <--> my router's WAN port <--> my router's LAN port <--> my office network
I have my own router in my office that runs OpenWRT so has iptables and ebtables is available but not installed.
We're sure there is a rogue DHCP server somewhere on the building's network and, perhaps, other "dubious" devices.
Is there a rule I can add to ebtables on my router's outgoing port to ignore all trafic that's come from or through any MAC except the "legitimate" external/gateway router?
I'm quite capable of adding a rule to iptables but a little lost when it comes to authoring them and I've only just discovered ebtables. I'm "only" a programmer not a "real" network admin.
