RE: Firewall Rules by MAC Address. IS it possible?
GD Incorporation <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.m0n0wall |
|---|---|
| Organization | GD Systems |
| Message-ID | <[email protected]> |
Oh.... Thanks... That is a good input. Maybe the m0n0wall masters would be so kind to give me some tips on how to do what Yves said? Thanks Rendra -----Original Message----- From: YvesDM [mailto:[email protected]] Sent: Thursday, September 30, 2010 4:29 PM To: [email protected] Cc: m0n0wall Subject: Re: [m0n0wall] Firewall Rules by MAC Address. IS it possible? I meant, on a linux firewall (m0n0wall is Freebsd driven) you can add a firewall rule to filter on mac address. On m0n0wall this isn't implemeted in the gui, but I think you can do it directly in the config file, but you will have to search on how to filter on mac address with ipfw (firewall uses by Freebsd/m0n0wall) kind regards Yves On Thu, Sep 30, 2010 at 11:13 AM, GD Incorporation <[email protected]> wrote: > All I am saying is > > How many people... I mean, just regular pc users would know how to > execute such command? Plus, no one in other than computer department > in any company would want to use linux? Mostly just windows or mac. > Changing MAC address on mac or windows is not that easy. But changing > IP in Windows is just too easy. > > Most of my users are windows users. > > So that is why, for me, having mac filter in firewall rule would help > so much. > > Rendra > > -----Original Message----- > From: YvesDM [mailto:[email protected]] > Sent: Thursday, September 30, 2010 3:53 PM > To: [email protected] > Cc: m0n0wall > Subject: Re: [m0n0wall] Firewall Rules by MAC Address. IS it possible? > > On Thu, Sep 30, 2010 at 10:47 AM, GD Incorporation > <[email protected]> wrote: >> True >> >> But MAC address is a lot more difficult to change than IP for most people. >> Only a few computer people knows that. >> >> Rendra >> > > > On linux, with iptables you have the option --mac-source. > Don't know if there exists something similar in ipfw. > > kind regards > Yves > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > > > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]