From owner-freebsd-net Sun Nov 21 15:59:58 1999 Delivered-To: freebsd-net@freebsd.org Received: from mail.bsb.nutecnet.com.br (mail.bsb.nutecnet.com.br [200.252.253.5]) by hub.freebsd.org (Postfix) with ESMTP id 5E4F814E64 for ; Sun, 21 Nov 1999 15:59:50 -0800 (PST) (envelope-from visi0n@aux-tech.org) Received: from variola.chinatown.org (dl8020-bsb.bsb.nutecnet.com.br [200.252.209.20]) by mail.bsb.nutecnet.com.br (8.8.5/SCA-6.6) with SMTP id RAA03472; Sun, 21 Nov 1999 17:01:39 -0200 (BRV) Date: Sun, 21 Nov 1999 16:59:49 +0000 ( ) From: visi0n X-Sender: visi0n@variola.chinatown.org To: thivars@est.is Cc: "freebsd-net@FreeBSD.ORG" Subject: Re: Client restriction with "MAC ADDRESS" ? In-Reply-To: <38382E01.2A218720@est.is> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Sun, 21 Nov 1999, Thordur Ivarsson wrote: > Hi there, > > Do FreeBSD allow me to control traffic from client checked from the MAC > address. > > My problem is that everyone is allowed to connect to the network it self > but I need to filter users at the boarder firewall. I will give any user > IP number from DHCP server but if someone fakes IP number then I have > problems. > > Some users buy the internet connection then they are given another IP > number, and passed over the boarder firewall. But to be sure I would > like to check if their MAC address matches the IP. > > Any solution? > > TIA > > Thordur Ivarsson > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-net" in the body of the message > If these clients are connected in the same net segment they can forge mac addr too. =============================================================================== visi0n AUX Technologies [www.aux-tech.org] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message