From owner-freebsd-current@FreeBSD.ORG Wed Jul 20 05:22:28 2005 Return-Path: X-Original-To: current@freebsd.org Delivered-To: freebsd-current@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2AB1316A41F for ; Wed, 20 Jul 2005 05:22:28 +0000 (GMT) (envelope-from sam@errno.com) Received: from ebb.errno.com (ebb.errno.com [66.127.85.87]) by mx1.FreeBSD.org (Postfix) with ESMTP id CF45643D49 for ; Wed, 20 Jul 2005 05:22:27 +0000 (GMT) (envelope-from sam@errno.com) Received: from [66.127.85.91] ([66.127.85.91]) (authenticated bits=0) by ebb.errno.com (8.12.9/8.12.6) with ESMTP id j6K5MQms027268 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 19 Jul 2005 22:22:27 -0700 (PDT) (envelope-from sam@errno.com) Message-ID: <42DDE0C2.2070302@errno.com> Date: Tue, 19 Jul 2005 22:27:30 -0700 From: Sam Leffler User-Agent: Mozilla Thunderbird 1.0.2 (X11/20050327) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Patrick Tracanelli References: <42DD5B61.2060107@freebsdbrasil.com.br> <42DDD741.5030107@errno.com> In-Reply-To: <42DDD741.5030107@errno.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: current@freebsd.org Subject: Re: wlan_acl X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Jul 2005 05:22:28 -0000 Sam Leffler wrote: > Patrick Tracanelli wrote: > >> >> How can I test wlan_acl(4)? I just read about it but could not find >> where to set 0, 1 or 2 to the acl policy or where to add MAC addresses >> to... >> > If it's not in man ifconfig then we need to fix the man page. I just checked man and it's missing the info. You should UTSL but a quick glance indicates the commands are: ifconfig ath0 mac:open ifconfig ath0 mac:allow ifconfig ath0 mac:deny ifconfig ath0 mac:flush ifconfig ath0 mac:detach ifconfig ath0 mac:add ifconfig ath0 mac:del It doesn't appear I did any status code (yet). I haven't tested the acl stuff forever but it should work w/ any card that is properly integrated with the net80211 layer (in this case the assoc-req frame must go through net80211 so the acl can be applied). Sam