one note to this topic: anyone, who has root access to machine atteched to LAN, can setup any arbitrary MAC address to ethernet interface by using ifconfig command. so building access/accounting rules upon MAC addresses does not guarantee enhanced security/reliability, as some people would expect. sasha