Blocking DHCP based on MAC

Hello *

goal: i'd like to block dhcp broadcasts from known mac addresses ( trusted)
      on a bridge. The bridge itself should be dhcp server for
      DHCP Requests from unkown MAC Addressses ( untrusted ) and accept
      DHCP Broadcasts from unkown MAC Addresses

Problem: Those rules do not implement this goal:

/usr/sbin/ebtables -A MACFILTER  -s 52:54:05:c1:2d:1b -j DROP
/usr/sbin/ebtables -A FORWARD -i br0   -j MACFILTER
/usr/sbin/ebtables -A INPUT -i br0 -j MACFILTER

the local dhcp server acting on br0 gets and answers dhcp requests
fron knwon MAC Addresses liste in MACFILTER
So obviously i did not the right thing

which rules i should use better  ?

Setup:

i habe 2 DHCP Servers:

Server1 answering trusted clients with knwon MACS on interface trusted
this Server has also another interface untrusted connected to the bridge

Server2 is the bridge with an second dhcp Server answering on br0
this server should answer to als clients with unknwon MACS and
place them in the untrusted network

i can not answer all requests on server1, since it has an DHCP based on
LDAP. Due to what i think is a minor bug this Server1 does not
accept options like deny known-clients in the scope where they should be valid

TIA
Micha 
     


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642