From owner-freebsd-questions Fri Apr 27 16:30:37 2001 Delivered-To: freebsd-questions@freebsd.org Received: from ns1.coastsight.com (ns1.coastsight.com [208.46.230.17]) by hub.freebsd.org (Postfix) with ESMTP id 4E19837B422 for ; Fri, 27 Apr 2001 16:30:35 -0700 (PDT) (envelope-from maillist@coastsight.com) Received: from ns1.coastsight.com ([208.46.230.17]) by ns1.coastsight.com with esmtp (Exim 2.05 #1) id 14tHh4-000C2t-00 for freebsd-questions@freebsd.org; Fri, 27 Apr 2001 16:30:34 -0700 Date: Fri, 27 Apr 2001 16:30:34 -0700 (PDT) From: Rick Duvall To: freebsd-questions@freebsd.org Subject: IPFW and MAC Addresses Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Is there a way to do IPFW on a MAC Address level? What I am wanting is to only allow certain NIC's to pass packets to the Internet, as long as those specific NICs have a certain IP address. Reasoning: I have a wireless LAN I am providing internet over to customers. Like all wireless lans, it is layer 2. So, I can see the MAC address on the customer's end. But, I don't want the customer to be able to just grab any IP address they can get their hands on. I want to assign them 1 IP address, and have it so that if they use any other IP address other than that one, they won't be able to pass any packets on my network. Is this possible? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message