From owner-freebsd-questions@FreeBSD.ORG Mon Aug 15 21:17:14 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 6606F16A41F for ; Mon, 15 Aug 2005 21:17:14 +0000 (GMT) (envelope-from rsmith@xs4all.nl) Received: from smtp-vbr13.xs4all.nl (smtp-vbr13.xs4all.nl [194.109.24.33]) by mx1.FreeBSD.org (Postfix) with ESMTP id BCF7543D45 for ; Mon, 15 Aug 2005 21:17:13 +0000 (GMT) (envelope-from rsmith@xs4all.nl) Received: from slackbox.xs4all.nl (slackbox.xs4all.nl [213.84.242.160]) by smtp-vbr13.xs4all.nl (8.13.3/8.13.3) with ESMTP id j7FLHCis097543; Mon, 15 Aug 2005 23:17:12 +0200 (CEST) (envelope-from rsmith@xs4all.nl) Received: by slackbox.xs4all.nl (Postfix, from userid 1001) id D6A8F61B9; Mon, 15 Aug 2005 23:17:11 +0200 (CEST) Date: Mon, 15 Aug 2005 23:17:11 +0200 From: Roland Smith To: vladone Message-ID: <20050815211711.GB70491@slackbox.xs4all.nl> Mail-Followup-To: vladone , freebsd-questions@freebsd.org References: <534500571.20050815232810@spaingsm.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="DKU6Jbt7q3WqK7+M" Content-Disposition: inline In-Reply-To: <534500571.20050815232810@spaingsm.com> User-Agent: Mutt/1.4.2.1i X-GPG-Fingerprint: 1A2B 477F 9970 BA3C 2914 B7CE 1277 EFB0 C321 A725 X-GPG-Key: http://www.xs4all.nl/~rsmith/pubkey.txt X-GPG-Notice: If this message is not signed, don't assume I sent it! X-Virus-Scanned: by XS4ALL Virus Scanner Cc: freebsd-questions@freebsd.org Subject: Re: i can't block win98 computers X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Aug 2005 21:17:14 -0000 --DKU6Jbt7q3WqK7+M Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Aug 15, 2005 at 11:28:10PM +0300, vladone wrote: > Hi! > I try to block some computers to acces my gateway based on MAC > address. > I use this ipfw rule: > ipfw add 100 deny mac any xx:yy:aa:bb:cc:dd in via $private_interface > With this i can block XP computers but not work with Win98. I dont > understand what is happened! As the ipfw manpage states, you can filter on layer-2 header fields (of which the MAC address is one) _where available_. It could be that Win98 doesn't correctly list the MAC address in the packets. You could try using tcpdump to check the packets. Roland --=20 R.F.Smith (http://www.xs4all.nl/~rsmith/) Please send e-mail as plain text. public key: http://www.xs4all.nl/~rsmith/pubkey.txt --DKU6Jbt7q3WqK7+M Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (FreeBSD) iD8DBQFDAQZXEnfvsMMhpyURAtxbAJ0UgI8pxz/cVB1H/hALXI+NJvFT7QCfaIDg 0lv+9XHf9woUnZYuyNsB4Ao= =ZPur -----END PGP SIGNATURE----- --DKU6Jbt7q3WqK7+M--