From owner-freebsd-hackers@FreeBSD.ORG  Tue Jun 15 20:14:20 2004
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 2BB8016A4CE
	for <freebsd-hackers@freebsd.org>;
	Tue, 15 Jun 2004 20:14:20 +0000 (GMT)
Received: from mproxy.gmail.com (rproxy.gmail.com [64.233.170.195])
	by mx1.FreeBSD.org (Postfix) with SMTP id 9DA6943D45
	for <freebsd-hackers@freebsd.org>;
	Tue, 15 Jun 2004 20:14:19 +0000 (GMT)
	(envelope-from aldrinleal@gmail.com)
Received: by mproxy.gmail.com with SMTP id 34so58926rnh
	for <freebsd-hackers@freebsd.org>;
	Tue, 15 Jun 2004 13:14:17 -0700 (PDT)
Received: by 10.38.97.42 with SMTP id u42mr94890rnb;
        Tue, 15 Jun 2004 13:14:17 -0700 (PDT)
Message-ID: <3534b0b304061513145a56e804@mail.gmail.com>
Date: Tue, 15 Jun 2004 17:14:17 -0300
From: Aldrin Leal <aldrinleal@gmail.com>
To: freebsd-hackers@freebsd.org
In-Reply-To: <20040615200043.GB11154@annelo.epita.fr>
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
References: <3534b0b3040615115713cc3589@mail.gmail.com>
	<20040615200043.GB11154@annelo.epita.fr>
Subject: Re: Bridging Code - MAC Filtering
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Jun 2004 20:14:20 -0000

I couldn't find any help on the exact syntax. And the manpage says
it's somewhat difficult.

Have you seen any practical article on this scenario? I couldn't find any.

Better yet: Has anyone ever tried this at home? :)

On Tue, 15 Jun 2004 22:00:43 +0200, Jeremie Le Hen
<jeremie.le-hen@epita.fr> wrote:
> 
> >      Does the bridging code in FreeBSD 5.2-RELEASE have the hability
> > to perform mac checking for a given IP?
> 
> Since you can filter bridged packets using ipfw(8) and the latter is able
> to match against MAC address, I would say yes.  Nevertheless, it may not
> be suitable enough for your needs, because it requires changing your rules
> each time you add a machine or change a network card.
> 
> Regards,
> --
> Jeremie LE HEN aka TtZ/TataZ                          jeremie.le-hen@epita.fr
>                                                                  ttz@epita.fr
> Hi! I'm a .signature virus! Copy me into your ~/.signature to help me spread!
>