From owner-freebsd-questions@FreeBSD.ORG  Mon Sep 24 21:44:09 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 1A6BB16A417
	for <freebsd-questions@freebsd.org>;
	Mon, 24 Sep 2007 21:44:09 +0000 (UTC) (envelope-from cswiger@mac.com)
Received: from mail-out4.apple.com (mail-out4.apple.com [17.254.13.23])
	by mx1.freebsd.org (Postfix) with ESMTP id 0644913C465
	for <freebsd-questions@freebsd.org>;
	Mon, 24 Sep 2007 21:44:08 +0000 (UTC) (envelope-from cswiger@mac.com)
Received: from relay13.apple.com (relay13.apple.com [17.128.113.29])
	by mail-out4.apple.com (Postfix) with ESMTP id DD97512BB0D1;
	Mon, 24 Sep 2007 14:44:08 -0700 (PDT)
Received: from relay13.apple.com (unknown [127.0.0.1])
	by relay13.apple.com (Symantec Mail Security) with ESMTP id
	C093A2FB8001; Mon, 24 Sep 2007 14:44:08 -0700 (PDT)
X-AuditID: 1180711d-a2b5ebb000006cd8-66-46f82fa849df
Received: from [17.214.13.96] (cswiger1.apple.com [17.214.13.96])
	(using TLSv1 with cipher AES128-SHA (128/128 bits))
	(No client certificate requested)
	by relay13.apple.com (Apple SCV relay) with ESMTP id A74502F18001;
	Mon, 24 Sep 2007 14:44:08 -0700 (PDT)
In-Reply-To: <020301c7fef2$7e8a1db0$6501a8c0@GRANT>
References: <020301c7fef2$7e8a1db0$6501a8c0@GRANT>
Mime-Version: 1.0 (Apple Message framework v752.2)
X-Priority: 3
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-Id: <BE04780C-507E-4F98-8F20-EFEEEEA6C8CE@mac.com>
Content-Transfer-Encoding: 7bit
From: Chuck Swiger <cswiger@mac.com>
Date: Mon, 24 Sep 2007 14:44:07 -0700
To: Grant Peel <gpeel@thenetnow.com>
X-Mailer: Apple Mail (2.752.2)
X-Brightmail-Tracker: AAAAAA==
Cc: freebsd-questions@freebsd.org
Subject: Re: Silly IPFW question.
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 24 Sep 2007 21:44:09 -0000

On Sep 24, 2007, at 2:33 PM, Grant Peel wrote:
> Is there anyway to make a rule in IPFW that will match MAC  
> addresses instead of IP or port numnbers (and no, I didnt see  
> anything in the docs :-))

Search "man ipfw" for MAC.  Something like this will:

   ipfw add 10 deny MAC any 10:20:30:40:50:60

...block any traffic from that ethernet address.  Be aware of the  
net.link.ether.ipfw sysctl needed and advice in the section "PACKET  
FLOW".

-- 
-Chuck