Re: Blocking DHCP based on MAC

Op ma, 16-10-2006 te 11:03 +0200, schreef Michael Arndt:
> Hello *
> 
> goal: i'd like to block dhcp broadcasts from known mac addresses ( trusted)
>       on a bridge. The bridge itself should be dhcp server for
>       DHCP Requests from unkown MAC Addressses ( untrusted ) and accept
>       DHCP Broadcasts from unkown MAC Addresses
> 
> Problem: Those rules do not implement this goal:
> 
> /usr/sbin/ebtables -A MACFILTER  -s 52:54:05:c1:2d:1b -j DROP
> /usr/sbin/ebtables -A FORWARD -i br0   -j MACFILTER
> /usr/sbin/ebtables -A INPUT -i br0 -j MACFILTER
> 
> the local dhcp server acting on br0 gets and answers dhcp requests
> fron knwon MAC Addresses liste in MACFILTER
> So obviously i did not the right thing
> 
> which rules i should use better  ?

Check the rule counters (-L --Lc) to see if traffic gets to that point
in the filter tables. Are you sure your bridge is configured correctly
(with brctl/ifconfig/route)?

cheers,
Bart



-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642