[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: MAC address and Firewall rules



Iptables appears to have support for blocking specifict mac addrs, but keep in
mind that a "clever" user may be able to change their mac addr.

--Jeff

On Fri, Apr 14, 2000 at 08:02:55AM +0200, Michael Wood <wood@kingsley.co.za> wrote:
> Hi
> 
> On Thu, Apr 13, 2000 at 09:55:05PM +0200, Oswald Buddenhagen wrote:
> > > Is it possible to set a firewall rule or rules to block certain MAC
> > > addresses from being routed? If so, how can that be done?
> > > 
> > it will be possible with kernel 2.4 (as far as i understand).
> > i have not found any options for that in the 2.2 kernel (ipchains).
> 
> Maybe you could play around with arp to "disable" the MAC
> addresses you don't want to route?  I don't know how reliable or
> secure it would be if you can, though.
> 
> -- 
> Michael Wood        | Tel: +27 21 762 0276 | http://www.kingsley.co.za/
> wood@kingsley.co.za | Fax: +27 21 761 9930 | Kingsley Technologies
> 
> 
> --  
> To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org


Reply to: