iptables/mac address filtering question

["Jay Sprenkle" <jsprenkle@gmail.com>]

Good morning all,

I'm already aware mac address is easily spoofed but I'd like to make
it just a little bit harder to break into my system anyway. I'm trying
to only allow a specific box to use scp to safely transfer data over
the internet.

I've put in a rule in my iptables chain but notice when I try to
connect it's rejected. The mac address I'm getting is not the same as
what iwconfig reports on my device. If a packet is passed through
routers on it's way to my box do they change the mac address of the
packet?

Any suggestions would be welcome.

Have a good weekend