Re: Blocking/allowing association by mac address?

In message: <3DE1E0F9.30102.1783C5@localhost>
            "Mike Avery" <[email protected]> writes:
: I didn't see mac address blocking in the ipfw man file, 
: however, I do know ipfw would allow me to block or allow 
: based on IP addresses.  While not as solid as mac 
: addresses, it would do.  (And yes, I know that mac 
: addresses can be changed (I've been doing that since 
: the 80's), and that IP addresses can be changed too... 
: but it's a start, and probably good enough for this small 
: town.)

On my -current box:

     { MAC | mac } dst-mac src-mac
             Match packets with a given dst-mac and src-mac addresses, speci-
             fied as the any keyword (matching any MAC address), or six groups
             of hex digits separated by colons, and optionally followed by a
             mask indicating how many bits are significant, as in

                   MAC 10:20:30:40:50:60/33 any

             Note that the order of MAC addresses (destination first, source
             second) is the same as on the wire, but the opposite of the one
             used for IP addresses.


Warner
--
*bsd wireless list, a bawug thing <http://www.bawug.org/>
[un]subscribe: http://lists.bawug.org/mailman/listinfo/bsd-wireless/