From owner-freebsd-config@FreeBSD.ORG Fri Mar 5 14:45:10 2004 Return-Path: Delivered-To: freebsd-config@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DED4F16A4CE for ; Fri, 5 Mar 2004 14:45:10 -0800 (PST) Received: from smtp1.home.se (smtp1.home.se [213.214.194.101]) by mx1.FreeBSD.org (Postfix) with ESMTP id F266243D1F for ; Fri, 5 Mar 2004 14:45:09 -0800 (PST) (envelope-from cesar@da-silva.info) Received: from cesaro2jpmqhlq cesar.da.silva@home.se [213.113.73.104] Novell NetWare; Fri, 05 Mar 2004 23:42:01 +0100 From: "Cesar da Silva" To: Date: Fri, 5 Mar 2004 23:45:08 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook, Build 11.0.5510 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Thread-index: AcQDA4KRTbNQ92bTRwqXU7Lp+qDcNw== Message-Id: <20040305224509.F266243D1F@mx1.FreeBSD.org> Subject: Re: firewall IP/MAC X-BeenThere: freebsd-config@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Installation and Configuration List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Mar 2004 22:45:11 -0000 I think that your suggestion is great, but I think that the best option if available is to block the customers port on the router/switch, than he can alter his IP-/ MAC-address as much as he likes. Regards. Cesar da Silva Andras Got wrote: >I think, he should set up that only those few MAC address-es can use the network, and bind this to their own IP address. >When something bad happens you just set a block on that mac and IP duo. :)