From owner-freebsd-questions@FreeBSD.ORG  Sun Sep  7 13:09:51 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 0799416A4C0
	for <freebsd-questions@FreeBSD.ORG>;
	Sun,  7 Sep 2003 13:09:51 -0700 (PDT)
Received: from out006.verizon.net (out006pub.verizon.net [206.46.170.106])
	by mx1.FreeBSD.org (Postfix) with ESMTP id B1F5E43FE9
	for <freebsd-questions@FreeBSD.ORG>;
	Sun,  7 Sep 2003 13:09:49 -0700 (PDT)	(envelope-from cswiger@mac.com)
Received: from mac.com ([68.237.14.199]) by out006.verizon.net
          (InterMail vM.5.01.05.33 201-253-122-126-133-20030313) with ESMTP
          id <20030907200949.KDJF5302.out006.verizon.net@mac.com>;
          Sun, 7 Sep 2003 15:09:49 -0500
Message-ID: <3F5B9086.9020404@mac.com>
Date: Sun, 07 Sep 2003 16:09:42 -0400
From: Chuck Swiger <cswiger@mac.com>
Organization: The Courts of Chaos
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
	rv:1.4) Gecko/20030624
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Colin Watson <sb.mailinglist@lambdabroadband.com>
References: <00aa01c3757a$bf2b9430$0b4e1151@blackbox>
In-Reply-To: <00aa01c3757a$bf2b9430$0b4e1151@blackbox>
X-Enigmail-Version: 0.76.5.0
X-Enigmail-Supports: pgp-inline, pgp-mime
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
X-Authentication-Info: Submitted using SMTP AUTH at out006.verizon.net from
	[68.237.14.199] at Sun, 7 Sep 2003 15:09:48 -0500
cc: freebsd-questions@FreeBSD.ORG
Subject: Re: Binding MAC to IP Statically
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 07 Sep 2003 20:09:51 -0000

Colin Watson wrote:
[ ...rewrapped to 80-columns... ]
> Any way to bind a MAC address statically to an IP?. I wish to do this to
> prevent a user from changing his IP address on the subnet, so if he does he
> can't pass traffic. I have experimented with ipfw, but I can't quite see how
> I could accomplish the binding of a IP statically to a nic's MAC. Any ideas
> be appericated.

IPFW2 lets you perform firewall actions on a MAC address, rather than an IP.

You can configure a DHCP server to staticly allocate an IP address to that 
machine via something like this in {/usr/local}/etc/dhcpd.conf:

host pi.codefab.com {
         hardware ethernet 00:00:00:00:00:00;
         fixed-address 66.234.138.67;
}

-- 
-Chuck