Date: Tue, 15 Feb 2005 15:12:31 -0600 From: Scot Hetzel <swhetzel@gmail.com> To: Artem Kuchin <matrix@itlegion.ru> Cc: freebsd-stable@freebsd.org Subject: Re: How to make ipfw consider MAC-IP match? Message-ID: <790a9fff05021513124e6a016b@mail.gmail.com> In-Reply-To: <022401c512d7$e0779890$0c00a8c0@artem> References: <200502142022.j1EKMl5R092740@lurza.secnetix.de> <022401c512d7$e0779890$0c00a8c0@artem>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 14 Feb 2005 23:58:03 +0300, Artem Kuchin <matrix@itlegion.ru> wrote: > Hi! > > I have a table with ethernet (MAC) addresses matching IPs. It is > used to build dhcp config file. But regardless of that any user can > assign his neighbour ips while that pc is turned off and use it to > access internet. The local ips are 192.168. and are behind natd. > I am running 5.3-STABLE and have heard that ipfw2 can in someway > use MAC addresses, but how do I setup ipfw in such a way that > it allows certain IP only from one and only one MAC address? > I hope you are getting my idea. > You would add the following to the end of your IPFW rule for each IP Address you want to restrict. pass all from 192.168.0.10 to any mac any 10:20:30:40:50:60 Where "10:20:30:40:50:60" is the MAC addr for IP addr 192.168.0.10. Scot
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?790a9fff05021513124e6a016b>