RE: Pass-through MAC vs Allowed IP Address

"GD Incorporation" <[email protected]>
Newsgroups gmane.comp.security.firewalls.m0n0wall
Message-ID <[email protected]>
Hi Lee,

All the connection I need to make is Http connection. I tried to reboot the
server and the client machine, it did not work. What I did was, I tried to
shut the firewall all night long and also the clients, then it worked. 

Any comments? Is it possible due to some sudden electrical failure, the
software somehow got some bad clusters or missing bits etc... It is quite
often to have power blackout here in my country. I am thinking to buy a ups
for the firewall. By the way, I uses the standard PC iso for the firewall.

Thank you

-----Original Message-----
From: Lee Sharp [mailto:[email protected]] 
Sent: Saturday, December 24, 2011 2:38 AM
To: [email protected]
Subject: Re: [m0n0wall] Pass-through MAC vs Allowed IP Address

On 12/23/2011 10:46 AM, GD Incorporation wrote:
> Dear all Monowallist
>
>
>
> I have one thing in mind that keeps bugging me. In m0n0wall, when it 
> is freshly installed, the Pass-through MAC list will work flawlessly. 
> But give it some time; it seems that somehow some computer's macs 
> cannot pass the firewall to the Internet even if there is already 
> pass-through Mac list for that particular computer.

Not sure why a reinstall "fixes" this, but I can tell you how the code
works...

With PassThrough MAC, the MAC address is preauthenticated.  However, the
authentication method takes place via http.  So, if your first network
request is http, all is good.  If it is anything else (like a DNS
request) it will fail.  Often when that happens, Windows takes the net
"offline" and you never try again.  With allowed IPs you are in the open
table, and any traffic passes immediately.

Also, not that time on a m0n0wall install has nothing to do with anything.
It only looks at the hard drive on boot, and only writes to in on config
saves.  A reboot takes you to a clean system.

			Lee

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.