From owner-freebsd-net@FreeBSD.ORG  Tue Jun 15 20:01:10 2004
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 84C3716A4CE; Tue, 15 Jun 2004 20:01:10 +0000 (GMT)
Received: from deliver.epitech.net (deliver.epitech.net [163.5.0.25])
	by mx1.FreeBSD.org (Postfix) with SMTP
	id 8A41843D48; Tue, 15 Jun 2004 20:01:09 +0000 (GMT)
	(envelope-from le-hen_j@epita.fr)
Received: from epita.fr ([10.42.1.60])
 by deliver.epitech.net (SAVSMTP 3.1.2.35) with SMTP id M2004061521554324027
 ; Tue, 15 Jun 2004 21:55:43 +0200
Received: from annelo (annelo.epita.fr [10.42.120.68])
	by epita.fr id i5FK0iw23071
	Tue, 15 Jun 2004 22:00:44 +0200 (CEST)
Date: Tue, 15 Jun 2004 22:00:43 +0200
From: Jeremie Le Hen <jeremie.le-hen@epita.fr>
To: Aldrin Leal <aldrinleal@gmail.com>
Message-ID: <20040615200043.GB11154@annelo.epita.fr>
References: <3534b0b3040615115713cc3589@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <3534b0b3040615115713cc3589@mail.gmail.com>
User-Agent: Mutt/1.4i
cc: freebsd-net@freebsd.org
cc: freebsd-ipfw@freebsd.org
cc: freebsd-hackers@freebsd.org
Subject: Re: Bridging Code - MAC Filtering
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Jun 2004 20:01:10 -0000

>      Does the bridging code in FreeBSD 5.2-RELEASE have the hability
> to perform mac checking for a given IP?

Since you can filter bridged packets using ipfw(8) and the latter is able
to match against MAC address, I would say yes.  Nevertheless, it may not
be suitable enough for your needs, because it requires changing your rules
each time you add a machine or change a network card.

Regards,
-- 
Jeremie LE HEN aka TtZ/TataZ                          jeremie.le-hen@epita.fr
                                                                 ttz@epita.fr
Hi! I'm a .signature virus! Copy me into your ~/.signature to help me spread!