Re: Mac Address Filter

[Dries Schellekens <gwyllion@ace.ulyssis.org>]

On Sat, 8 Jun 2002, O. Matt wrote:

> On Sat, Jun 08, 2002 at 08:44:06PM +0200, Dries Schellekens wrote:
> > On Sat, 8 Jun 2002, O. Matt wrote:
> >
> > > Hi folks,
> > >
> > > I wonder how I could set up a mac addresses filtering firewall rule on
> > > my little OpenBSD 3.0 server. Any idea ?
> >
> > It's not possible to do MAC filtering in PF (yet).
> > The only way to filter MAC address is to run a bridge. Read brconfig(5).
> I think that it's not exactly what I want because what I need is to
> allow incoming connexions on TCP/UDP port 'p' only for hosts with the 'a1'
> mac
> address and the 'a2' ip(v4|v6) address on interface ne3.
>
> Do you have any solution ?

Why do you want to check the MAC address? Packet filters work with IP
addresses.

I've just been told that MAC filtering will no be implementated in PF.


Cheers,

Dries
-- 
Dries Schellekens
email: gwyllion@ulyssis.org