Date: Mon, 22 May 2000 13:40:32 -0500 (EST) From: Blake Matheny <matheny@bussert.com> To: Matthew Dillon <dillon@apollo.backplane.com> Cc: freebsd-security@FreeBSD.ORG Subject: Re: Firewall Rules Message-ID: <Pine.BSF.4.10.10005221339520.8647-100000@arf.bussert.com> In-Reply-To: <200005221802.LAA61355@apollo.backplane.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Yeah, I'm worried that some windows users (that can read) :) might try to change the network settings, etc. Blake Matheny Bussert Consulting Network Engineer (765)423-2100 matheny@bussert.com On Mon, 22 May 2000, Matthew Dillon wrote: > :Is there a way to deny by mac address rather than ip address? I need to > :deny a group of computers (with static ip's) access to the internet, but > :if someone changes their ip (with DHCP) it doesn't do any good. These are > :windows boxes with a freebsd firewall, no policies on the computers and if > :possible I would like to implement this only on the firewall level. Anyone > :got any advice? Thanks. > :-Blake > : > :Blake Matheny > :Bussert Consulting > :Network Engineer > :(765)423-2100 > :matheny@bussert.com > > You can set dhcp up to assign a specific IP address for a specific > MAC address, would that be good enough or are you worried about > the windows users screwing around with their network config? > > -Matt > Matthew Dillon > <dillon@backplane.com> > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.10.10005221339520.8647-100000>