Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 9 Jul 2005 12:40:26 +0300
From:      vladone <vladone@llwb135.servidoresdns.net>
To:        freebsd-ipfw@freebsd.org
Subject:   Re[2]: rules to permit only few MAC address
Message-ID:  <1731024126.20050709124026@llwb135.servidoresdns.net>
In-Reply-To: <42CE9A32.50806@yahoo.com.ar>
References:  <1904693964.20050705145004@llwb135.servidoresdns.net> <8eea04080507051118692d783c@mail.gmail.com> <598121599.20050705232925@llwb135.servidoresdns.net> <42CB02FB.108@gmail.com> <42CE9A32.50806@yahoo.com.ar>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
Now i test this type of control with:
pif is the private interface

$cmd add 200 skipto 210 all from any to any in via $pif layer2
$cmd add 200 skipto 4000 all from any to any out via $pif layer2

#client1
$cmd add 210 skipto 3000 MAC any 00:0e:a6:81:40:3e
#client2
$cmd add 211 skipto 3000 MAC any 00:50:8b:6b:0c:b2
#deny not allowed
$cmd add 212 deny MAC any any in recv $pif layer2

and work pretty. If anyone have another suggestion please post!




Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?1731024126.20050709124026>