Re: WI-IF - MAC restrictions

[Ron Rosson <insane@oneinsane.net>]

--On Sunday, February 23, 2003 18:52:00 -0700 Theo de Raadt 
<deraadt@cvs.openbsd.org> wrote:

>> >   how I can permit only some MAC addresses with WI-FI? Is some tool
>> >   like in LINUX?:
>> >
>> > iwpriv wlan1 maccmd 1
>> > iwpriv wlan1 addmac xx:xx:xx:xx:xx:xx // user1
>> > iwpriv wlan1 addmac xx:xx:xx:xx:xx:xx // user2
>>
>> Your question is unclear. If you are asking if you can restrict packets
>> based on MAC address (e.g. using pf(4)), the answer is "no" - pf(4) does
>> not filter on hardware address (I'm sure someone will correct me if I'm
>> wrong here). If you're asking if, using OpenBSD as a wireless AP, you
>> can restrict which clients associate with the AP ... well, I looked
>> through wicontrol(8) and wi(4) and didn't see any such functionality.
>> However, I may have missed something. authpf(8) is one solution to the
>> question of network authentication,
>> wireless or wired, but it may or may not suit your situation - it's not
>> a MAC address filter.
>>
>> You may wish to read pf.conf(5), wicontrol(8), wi(4), authpf(8) and
>> perhaps check out one of the projects that is using OpenBSD as a basis
>> for wireless APs/gateways/routers/firewalls.
>> http://www.opensoekris.org

Correction for the archives... It is http://www.opensoekris.com

>
> You can do such filtering in the bridge.
>



--
----------------------------------------------------------------------------
Ron Rosson                                   ... and a UNIX user said ...
The InSaNe One                                       rm -fr *
insane@oneinsane.net                        and all was /dev/null and void()
----------------------------------------------------------------------------