From owner-freebsd-isp  Thu Jan  3  0: 5: 9 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from mx1.dev.itouchnet.net (devco.net [196.15.188.2])
	by hub.freebsd.org (Postfix) with ESMTP id 3BAEF37B405
	for <isp@freebsd.org>; Thu,  3 Jan 2002 00:05:05 -0800 (PST)
Received: from nobody by mx1.dev.itouchnet.net with scanned_ok (Exim 3.33 #2)
	id 16M2tj-000EGo-00
	for isp@freebsd.org; Thu, 03 Jan 2002 10:06:47 +0200
Received: from shell.devco.net ([196.15.188.7])
	by mx1.dev.itouchnet.net with esmtp (Exim 3.33 #2)
	id 16M2th-000EGT-00; Thu, 03 Jan 2002 10:06:45 +0200
Received: from bvi by shell.devco.net with local (Exim 3.33 #4)
	id 16M2x4-000Csv-00; Thu, 03 Jan 2002 10:10:14 +0200
Date: Thu, 3 Jan 2002 10:10:14 +0200
From: Barry Irwin <bvi@itouchlabs.com>
To: Peter Brezny <peter@skyrunner.net>
Cc: TD790@aol.com, isp@freebsd.org
Subject: Re: access restriction by MAC
Message-ID: <20020103101014.G30577@itouchlabs.com>
References: <a8.44220b3.29623ec0@aol.com> <NEBBIGLHNDFEJMMIEGOOAEMHEGAA.peter@skyrunner.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <NEBBIGLHNDFEJMMIEGOOAEMHEGAA.peter@skyrunner.net>; from peter@skyrunner.net on Mon, Dec 31, 2001 at 06:27:00PM -0500
X-Checked: This message has been scanned for any virusses and unauthorized attachments.
X-iScan-ID: 54854-1010045206-64567@mx1.dev.itouchnet.net version $Name: REL_2_0_2 $
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

have a look at the ethfw package, this will allow you to add firewall rules
based on mac address.  If you are concerned about tying IP's to specific mac
addresses you can look at using static arp entries on your gateway, although
this can get rather cumbersome as soon as you have more than a handful of
addresses.

Barry


On Mon 2001-12-31 (18:27), Peter Brezny wrote:
> This looks like a great package.  however I was hoping someone might have
> some pointers to put something like this together by hand using ipfw.
> 
> Anyone?
> 
> Peter Brezny
> Skyrunner.net
> 
> 
> 
> -----Original Message-----
> From: TD790@aol.com [mailto:TD790@aol.com]
> Sent: Monday, December 31, 2001 5:21 PM
> To: peter@skyrunner.net
> Cc: isp@freebsd.org
> Subject: Re: access restriction by MAC
> 
> 
> In a message dated 12/31/2001 9:01:51 AM Eastern Standard Time,
> peter@skyrunner.net writes:
> 
> > 'm looking for a way to restrict connectivity by mac address.
> >
> >  Any suggestions on this?
> >
> >  Ideally,  a package that integrated usage based billing would be superb,
> but
> >  I'd settle just for something that would only allow access to specific
> mac
> >  addresses.
> >
> 
> Our commercial add-on bandwidth manager software package can do both for you
> (include enforce MAC/IP pairs if necessary). You can also match src/dst MACs
> (if you wanted to allow access to local hosts but not the gateway, for
> example).
> 
> www.etinc.com for more info.
> 
> Dennis
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
> 
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message