Re: Mac Address Filter

[Peter Varga <peter.varga@screaminet.com>]

On Sat, Jun 08, 2002 at 01:21:10PM -0700, David S. wrote:
> > Why does anyone wants MAC filtering?
> 
> I administer a Linux server, using netfilter for localhost port filtering.
> Some clients with dynamic IP addresses on the same subnet need acces to
> the server.  I don't have administrative control over the entire subnet,
> so I don't want to open the server to the whole subnet.  The clients
> that do need access could - and probably should - have static IP addresses.

Client sends the Client Identifier param to dhcpd => dhcpd can be
configured to assign a specific range to a class/subclass using match
expressions.  Maybe this is what you could use?

man dhcpd.conf

( I do not know if it was mentioned before, pardon me for repeating. )
> But in the large beaurocratic organization I work for, getting
static > addresses from those responsible for managing them can be a
bother.  I  > filter on MAC addresses for those dynamically-addressed
clients.  >  > So in my case, MAC address filtering is not a
necessity, but it is a  > convenience.  >  > David S.  >  >