From owner-freebsd-stable@FreeBSD.ORG  Tue Feb 15 17:49:58 2005
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 8278116A4CE
	for <freebsd-stable@freebsd.org>;
	Tue, 15 Feb 2005 17:49:58 +0000 (GMT)
Received: from voodoo.oberon.net (voodoo.oberon.net [212.118.165.100])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 0F87143D3F
	for <freebsd-stable@freebsd.org>;
	Tue, 15 Feb 2005 17:49:58 +0000 (GMT)
	(envelope-from igor@doom.homeunix.org)
Received: from dialup84119-87.ip.peterstar.net ([84.204.119.87]
	helo=doom.homeunix.org)
	by voodoo.oberon.net with esmtps (TLSv1:AES256-SHA:256)
	(Exim 4.44 (FreeBSD))	id 1D16oX-0002Wk-Up
	for freebsd-stable@freebsd.org; Tue, 15 Feb 2005 18:49:52 +0100
Received: from doom.homeunix.org (localhost [127.0.0.1])
	by doom.homeunix.org (8.13.1/8.13.1) with ESMTP id j1FHjPYA001339;
	Tue, 15 Feb 2005 20:45:29 +0300 (MSK)
	(envelope-from igor@doom.homeunix.org)
Received: (from igor@localhost)
	by doom.homeunix.org (8.13.1/8.13.1/Submit) id j1FHj4L2001337;
	Tue, 15 Feb 2005 20:45:04 +0300 (MSK)
	(envelope-from igor)
Date: Tue, 15 Feb 2005 20:45:04 +0300
From: Igor Pokrovsky <ip@doom.homeunix.org>
To: Chris Dillon <cdillon@wolves.k12.mo.us>
Message-ID: <20050215174504.GA1295@doom.homeunix.org>
Mail-Followup-To: Chris Dillon <cdillon@wolves.k12.mo.us>,
	Artem Kuchin <matrix@itlegion.ru>, freebsd-stable@freebsd.org
References: <200502142022.j1EKMl5R092740@lurza.secnetix.de>
	<20050214145543.L42760@duey.wolves.k12.mo.us>
	<024501c512e0$aa382e30$0c00a8c0@artem>
	<20050214161017.G42760@duey.wolves.k12.mo.us>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20050214161017.G42760@duey.wolves.k12.mo.us>
User-Agent: Mutt/1.4.2.1i
cc: Artem Kuchin <matrix@itlegion.ru>
cc: freebsd-stable@freebsd.org
Subject: Re: How to make ipfw consider MAC-IP match?
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Production branch of FreeBSD source code
	<freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Feb 2005 17:49:58 -0000

On Mon, Feb 14, 2005 at 04:18:47PM -0600, Chris Dillon wrote:
> >(i did not undestrand, how i somebody can match mac and ip with 
> >static arp except that he actually get the physical NIC from 
> >somebody's computer).
> 
> Because you can change the MAC address of your NIC to match someone 
> else's very easily.  Here's how in FreeBSD:
> 
> ifconfig fxp0 link 00:11:22:33:44:55
> 
> It's that easy...

It's not that easy. Not all cards support MAC address change.
And even if a card support this, it is not always possible to do this
with ifconfig.

-ip

-- 
On a beautiful day like this it's hard to believe anyone
can be unhappy -- but we will work on it.