From owner-freebsd-questions Mon Jan 22 12:52:44 2001 Delivered-To: freebsd-questions@freebsd.org Received: from tango.SoftHome.net (tango.SoftHome.net [204.144.231.49]) by hub.freebsd.org (Postfix) with SMTP id 47D9F37B402 for ; Mon, 22 Jan 2001 12:52:26 -0800 (PST) Received: (qmail 19950 invoked by uid 417); 22 Jan 2001 21:00:20 -0000 Received: from nas-213-43-139-142.ixir.com (HELO gnu) (213.43.139.142) by smtpa.softhome.net with SMTP; 22 Jan 2001 21:00:20 -0000 Message-ID: <001601c084b6$2f6d9940$8e8b2bd5@gnu> From: "MuratBSD" To: "Dan Mahoney, System Admin" , References: Subject: Re: IPFW Capabilities Date: Mon, 22 Jan 2001 22:55:28 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4133.2400 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hi Basically, IP is layer3 and MAC is layer 2 so I think there is no way out about MAC adress filtering, ----- Original Message ----- From: "Dan Mahoney, System Admin" To: Sent: Monday, January 22, 2001 4:48 PM Subject: IPFW Capabilities > Hey all, > > I'm currently evaluating the feasibility of using a pure FreeBSD based > solution versus ETInc's bandwidth manager, which I am considering > purchasing. Can someone tell me if the following are possible: > > 1. Is there a way to make ipfw deny traffic by MAC address? (We have > colocation customers, and are trying to prevent "stolen" IP addresses.) > > 2. Is there any way to set up a dual-NIC freeBSD box as a COMPLETELY > TRANSPARENT bridge (meaning our customers will not have to change their > gateway address, and meaning that the machine doing the bandwidth > management/limiting/throttling will not show up on traceroutes? (I prefer > this because it makes migration easier, and it also makes things more > secure (as in, nobody will attack a router that doesn't show up on > traceroutes). > > 3. Is there any way to graph the information shown by ipfw? Like MRTG? > > I think that's all. > > Thanks in advance, > > Dan Mahoney > > -- > > "There is no right and wrong, there is only fun and boring." > > -Fisher Stevens, "Hackers" > > --------Dan Mahoney-------- > Techie, Sysadmin, WebGeek > Gushi on efnet/undernet IRC > ICQ: 13735144 AIM: LarpGM > Web: http://prime.gushi.org > finger danm@prime.gushi.org > for pgp public key and tel# > --------------------------- > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message