Re: Mac Address Filter

[Dries Schellekens <gwyllion@ace.ulyssis.org>]

On Sat, 8 Jun 2002, O. Matt wrote:

> Hi folks,
>
> I wonder how I could set up a mac addresses filtering firewall rule on
> my little OpenBSD 3.0 server. Any idea ?

It's not possible to do MAC filtering in PF (yet).
The only way to filter MAC address is to run a bridge. Read brconfig(5).
>From the examples section:

# brconfig bridge0 rule pass in on fxp0 src 0:1:2:3:4:5 dst 5:4:3:2:1:0
# brconfig bridge0 rule pass out on fxp0 src 5:4:3:2:1:0 dst 0:1:2:3:4:5
# brconfig bridge0 rule block in on fxp0
# brconfig bridge0 rule block out on fxp0


Cheers,

Dries
-- 
Dries Schellekens
email: gwyllion@ulyssis.org