RE: Firewall Rules by MAC Address. IS it possible?

James McKeand <[email protected]>
Newsgroups gmane.comp.security.firewalls.m0n0wall
Message-ID <A481886951B7CE4B9F3BE5D9DBD1A279F5FFD505BC@sbs2k8>
In Windows it is easy enough to change the MAC address if the driver allows it. My Intel 10/100 onboard allows a "Locally Administered Address" but my Intel PRO 1000 PT Server adaptor does not... If I install Intel ProSet I may be able to change the address on the Server adaptor...

_________________________________ 
James W. McKeand 

-----Original Message-----
From: Gold Dragon [mailto:[email protected]] On Behalf Of GD Incorporation
Sent: Thursday, September 30, 2010 4:13 AM
To: 'YvesDM'
Cc: 'm0n0wall'
Subject: RE: [m0n0wall] Firewall Rules by MAC Address. IS it possible?

All I am saying is

How many people... I mean, just regular pc users would know how to execute
such command? Plus, no one in other than computer department in any company
would want to use linux? Mostly just windows or mac. Changing MAC address on
mac or windows is not that easy. But changing IP in Windows is just too
easy.

Most of my users are windows users. 

So that is why, for me, having mac filter in firewall rule would help so
much.

Rendra 

-----Original Message-----
From: YvesDM [mailto:[email protected]] 
Sent: Thursday, September 30, 2010 3:53 PM
To: [email protected]
Cc: m0n0wall
Subject: Re: [m0n0wall] Firewall Rules by MAC Address. IS it possible?

On Thu, Sep 30, 2010 at 10:47 AM, GD Incorporation
<[email protected]> wrote:
> True
>
> But MAC address is a lot more difficult to change than IP for most people.
> Only a few computer people knows that.
>
> Rendra
>


On linux, with iptables you have the option --mac-source.
Don't know if there exists something similar in ipfw.

kind regards
Yves

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.