From owner-freebsd-isp  Thu Feb 22  8:55:51 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from et-gw.etinc.com (et-gw.etinc.com [207.252.1.2])
	by hub.freebsd.org (Postfix) with ESMTP id 75D6437B65D
	for <freebsd-isp@FreeBSD.ORG>; Thu, 22 Feb 2001 08:55:47 -0800 (PST)
	(envelope-from dennis@etinc.com)
Received: from dbsys.etinc.com (dbsys.etinc.com [207.252.1.18])
	by et-gw.etinc.com (8.9.3/8.9.3) with ESMTP id MAA06447;
	Thu, 22 Feb 2001 12:03:59 GMT
	(envelope-from dennis@etinc.com)
Message-Id: <5.0.0.25.0.20010222115920.043cd3f0@mail.etinc.com>
X-Sender: dennis@mail.etinc.com
X-Mailer: QUALCOMM Windows Eudora Version 5.0
Date: Thu, 22 Feb 2001 12:06:32 -0500
To: Colin Campbell <sgcccdc@citec.qld.gov.au>,
	David Wilson <davew@sai.co.za>
From: Dennis <dennis@etinc.com>
Subject: Re: Filtering connections to ftpd by mac address ?
Cc: FreeBSD Mailing List <freebsd-isp@FreeBSD.ORG>
In-Reply-To: <Pine.BSF.4.21.0102220757470.59165-101000@guru.citec.qld.go
 v.au>
References: <NEBBJFIIGKGLPEBIJACLKENPDBAA.davew@sai.co.za>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

At 04:59 PM 02/21/2001, Colin Campbell wrote:
>Hi,
>
>Filtering on MAC address is very restricted. You can only do machines on
>the same network segment. After that all you see is the router's MAC
>address.
>
>Colin

This is a somewhat short-sighted view of the world with today's multitude 
of "bridged" environments.

for example, DSL and wireless links are usually bridged, so your customers 
MAC addresses are appearing on your network. Many of the customers for our 
ET/BWMGR for freebsd, which allows filtering and bandwidth management by 
MAC address, use our product to:

1) Only allow specific MAC address access to the network or service
2) Only allow specific devices access to an internal server
3) Control traffic by MAC address. This works nicely whether you are 
controller the customers router/proxy  and there are many workstations 
behind it, or whether they have individual machines and you are using DHCP 
to allocate addresses.
4) Keep track of how much traffic each MAC address/customers uses

for info, see www.etinc.com

regards,

Dennis Baasch


>  On Wed, 21 Feb 2001, David Wilson wrote:
>
> > Hi guys, howzit going ?
> >
> > Any ideas on how to filter connections to ftpd based on mac address ? ;-)
> > I have looked into ipfw and tcp wrappers, but both only seem to be able to
> > do IP addresses.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message