Re: wi - filtering traffic between stations on the same AP
Matt Peterson <[email protected]>
| Newsgroups | gmane.os.freebsd.devel.mobile |
|---|---|
| Message-ID | <14425683.1053384159@[192.168.0.233]> |
Might wanna try IPFW2 MAC address filtering, might work. --On Saturday, May 17, 2003 2:40 PM +0200 Vaclav Petricek <[email protected]> wrote: > > Hello > > I would like to be able to filter traffic between stations connected to > a single AP. The AP should be used just for Internet access and not for > communication between local stations. > > Reason: > 1. I do not want the stations to use the AP as a retranslation point where > they do not see each other directly > 2. I want to limit the traffic generated by windows broadcasts etc. > > I have seen in the wi driver that when the packet is destined for an > associated station, or it is a broad/multi/cast it gets retransmitted > immediatelly. > > My questions are: > > 1. Is there a way to force these packets to go through ipfw without > patching kernel? I have seen some sysctls that should control the ethernet > level filtering but I had no luck making it work on a single wi interface. > A pointer describing the data flow between interface kernel modules, > kernel and firewall modules would be great. > 2. In case I do have to make a patch to implement this filtering, what is > the best way to encapsulate it? Some flag to ifconfig that says drop > broadcasts and do not resend packets to associated stations? > > Thanks for any hints, > > -- > > Vaclav Petricek > > _______________________________________________ > [email protected] mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-mobile > To unsubscribe, send any mail to "[email protected]" > -- Matt Peterson another.geek.without.a.life [email protected] http://matt.peterson.org/ ------------------------------------------------- _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-mobile To unsubscribe, send any mail to "[email protected]"