RE: Firewall Rules by MAC Address. IS it possible?

GD Incorporation <[email protected]>
Newsgroups gmane.comp.security.firewalls.m0n0wall
Organization GD Systems
Message-ID <[email protected]>
Oh....

Thanks... That is a good input. Maybe the m0n0wall masters would be so kind
to give me some tips on how to do what Yves said?

Thanks
Rendra

-----Original Message-----
From: YvesDM [mailto:[email protected]] 
Sent: Thursday, September 30, 2010 4:29 PM
To: [email protected]
Cc: m0n0wall
Subject: Re: [m0n0wall] Firewall Rules by MAC Address. IS it possible?

I meant, on a linux firewall (m0n0wall is Freebsd driven) you can add a
firewall rule to filter on mac address.
On m0n0wall this isn't implemeted in the gui, but I think you can do it
directly in the config file, but you will have to search on how to filter on
mac address with ipfw (firewall uses by Freebsd/m0n0wall)

kind regards
Yves

On Thu, Sep 30, 2010 at 11:13 AM, GD Incorporation
<[email protected]> wrote:
> All I am saying is
>
> How many people... I mean, just regular pc users would know how to 
> execute such command? Plus, no one in other than computer department 
> in any company would want to use linux? Mostly just windows or mac. 
> Changing MAC address on mac or windows is not that easy. But changing 
> IP in Windows is just too easy.
>
> Most of my users are windows users.
>
> So that is why, for me, having mac filter in firewall rule would help 
> so much.
>
> Rendra
>
> -----Original Message-----
> From: YvesDM [mailto:[email protected]]
> Sent: Thursday, September 30, 2010 3:53 PM
> To: [email protected]
> Cc: m0n0wall
> Subject: Re: [m0n0wall] Firewall Rules by MAC Address. IS it possible?
>
> On Thu, Sep 30, 2010 at 10:47 AM, GD Incorporation 
> <[email protected]> wrote:
>> True
>>
>> But MAC address is a lot more difficult to change than IP for most
people.
>> Only a few computer people knows that.
>>
>> Rendra
>>
>
>
> On linux, with iptables you have the option --mac-source.
> Don't know if there exists something similar in ipfw.
>
> kind regards
> Yves
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.