Re: PF and MAC adress

[Miquel Abdon <Miquel@delfos.uab.es>]

Thanks a lot,
but I don't want to filter by MAC I want to BIND a MAC to an IP so, users canot navigate if they change their IP's by hand.

-----Original Message-----
From: "Ingmar Koecher [NETIKUS.NET ltd]" <ingmar.koecher@netikus.net>
To: Miquel Abdon <Miquel@delfos.uab.es>, misc@openbsd.org
Date: Mon, 22 Sep 2003 10:59:29 -0400
Subject: Re: PF and MAC adress

#> Can I bind a MAC to an IP like in iptables with PF in bridge
#> mode (two NIC's)?
#>
#> I do something like this in iptables:
#>
#> iptables -A INPUT -i eth0 --source 192.168.1.2 -m mac
#> --mac-source 00:00:00:00:00:01 -m state NEW -j ACCEPT

You can create rules for mac addresses using brconfig (man brconfig),
PF itself does not support filtering based on MAC addresses.

Look for "rules" in "man brconfig".

Ingmar.