diff -ruN vzctl-3.0.10/include/linux/vzcalluser.h vzctl-3.0.10-xt_mac/include/linux/vzcalluser.h
--- vzctl-3.0.10/include/linux/vzcalluser.h	2006-05-31 17:54:00.000000000 +0200
+++ vzctl-3.0.10-xt_mac/include/linux/vzcalluser.h	2006-08-03 13:02:48.000000000 +0200
@@ -96,6 +96,7 @@
 #define VE_IP_NAT_FTP_MOD		(1U<<21)
 #define VE_IP_NAT_IRC_MOD		(1U<<22)
 #define VE_IP_TARGET_REDIRECT_MOD	(1U<<23)
+#define VE_IP_MATCH_MAC_MOD		(1U<<24)
 
 /* these masks represent modules with their dependences */
 #define VE_IP_IPTABLES		(VE_IP_IPTABLES_MOD)
@@ -143,6 +144,8 @@
 					| VE_IP_NAT | VE_IP_CONNTRACK_IRC)
 #define VE_IP_TARGET_REDIRECT	(VE_IP_TARGET_REDIRECT_MOD	\
 					| VE_IP_NAT)
+#define VE_IP_MATCH_MAC		(VE_IP_MATCH_MAC_MOD	\
+					| VE_IP_IPTABLES)
 
 /* safe iptables mask to be used by default */
 #define VE_IP_DEFAULT					\
diff -ruN vzctl-3.0.10/src/lib/iptables.c vzctl-3.0.10-xt_mac/src/lib/iptables.c
--- vzctl-3.0.10/src/lib/iptables.c	2006-04-19 14:19:06.000000000 +0200
+++ vzctl-3.0.10-xt_mac/src/lib/iptables.c	2006-08-03 13:01:01.000000000 +0200
@@ -46,6 +46,7 @@
 	{"iptable_nat", VE_IP_NAT_MOD, VE_IP_NAT},
 	{"ip_nat_ftp", VE_IP_NAT_FTP_MOD, VE_IP_NAT_FTP},
 	{"ip_nat_irc", VE_IP_NAT_IRC_MOD, VE_IP_NAT_IRC},
+	{"xt_mac", VE_IP_MATCH_MAC_MOD, VE_IP_MATCH_MAC},
 #ifdef VE_IP_TARGET_REDIRECT
 	{"ipt_REDIRECT", VE_IP_TARGET_REDIRECT_MOD, VE_IP_TARGET_REDIRECT},
 #endif