From owner-freebsd-questions@FreeBSD.ORG  Sat Aug 21 16:11:52 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 6DB0216A4CE
	for <freebsd-questions@freebsd.org>;
	Sat, 21 Aug 2004 16:11:52 +0000 (GMT)
Received: from out001.verizon.net (out001pub.verizon.net [206.46.170.140])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 0348143D3F
	for <freebsd-questions@freebsd.org>;
	Sat, 21 Aug 2004 16:11:52 +0000 (GMT)	(envelope-from cswiger@mac.com)
Received: from [192.168.1.3] ([68.160.193.218]) by out001.verizon.net
          (InterMail vM.5.01.06.06 201-253-122-130-106-20030910) with ESMTP
          id <20040821161151.IBCI24594.out001.verizon.net@[192.168.1.3]>;
          Sat, 21 Aug 2004 11:11:51 -0500
Message-ID: <41277438.5090908@mac.com>
Date: Sat, 21 Aug 2004 12:11:36 -0400
From: Chuck Swiger <cswiger@mac.com>
Organization: The Courts of Chaos
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
	rv:1.7.2) Gecko/20040803
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: freebsd-questions@freebsd.org
References: <20040820172222.GA65972@etaq.com> <41263C76.7070102@mac.com>
	<20040820224717.GA66583@etaq.com> <447jrsa4ud.fsf@be-well.ilk.org>
In-Reply-To: <447jrsa4ud.fsf@be-well.ilk.org>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
X-Authentication-Info: Submitted using SMTP AUTH at out001.verizon.net from
	[68.160.193.218] at Sat, 21 Aug 2004 11:11:50 -0500
cc: Lowell Gilbert <freebsd-questions-local@be-well.ilk.org>
cc: Wayne M Barnes <wayne@etaq.com>
Subject: Re: dhcpd MAC filter
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 21 Aug 2004 16:11:52 -0000

Lowell Gilbert wrote:
[ ... ]
> Sounds like you're running the original IPFW rather than IPFW2.  As
> Chuck Swiger indicated, you need IPFW2 for the MAC keyword.  IPFW2 is
> standard on FreeBSD 5.x, but not earlier.

Note the syntax Wayne was using-- the MAC stuff needs to be specified as an 
option, as in:

    ipfw add drop all from any to any mac any 00:02:2d:2e:04:28

...rather than:

    #from man ipfw: MAC 10:20:30:40:50:60/33 any
    ipfw add drop all from MAC 00:02:2d:2e:04:28 to any

[ This is not very intuitive or documented via an example in the ipfw manpage, 
but any particular MAC address may correspond with zero, one, or many IP 
addresses.... ]

-- 
-Chuck