Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 26 Sep 2005 09:34:02 +0700 (ICT)
From:      Olivier Nicole <on@cs.ait.ac.th>
To:        free.bsd@gmx.net
Cc:        ipfw@freebsd.org, lists@wm-access.no, vladone@spaingsm.com
Subject:   Re: blocking a host
Message-ID:  <200509260234.j8Q2Y2LM038938@banyan.cs.ait.ac.th>
In-Reply-To: <18703.1127479590@www80.gmx.net> (free.bsd@gmx.net)
References:  <18703.1127479590@www80.gmx.net>

next in thread | previous in thread | raw e-mail | index | archive | help
// why would you want such a host on your network? if you run a isp of some
// sort and it's a customer who wants to steal static IP's. Why not give
// him one and charge extra? Or design the network better?

I'd say there are plenty of cases where you need to deny access by MAC
rather than by IP.

An example: we are a learning institution, students have their own
laptop (some of them at least). When they abuse the usage policy, we
want to block them by MAC because the IP is dynamic and so does not
reflect one specific machine.

(OK they will change the MAC too, but that kind of think will get them
denied of internet access for good).

Olivier



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200509260234.j8Q2Y2LM038938>