Date: Tue, 7 Sep 2004 17:46:06 -0400 From: Skip Ford <skip.ford@verizon.net> To: freebsd-ipfw@freebsd.org Subject: Re: simple mac address filter Message-ID: <20040907214606.GA2502@lucy.pool-70-17-33-17.pskn.east.verizon.net> In-Reply-To: <200409072312.46887.RoKlein@roklein.de> References: <5213605.1094564962778.JavaMail.brisbanebsd@mac.com> <20040907210245.GA587@lucy.pool-70-17-33-17.pskn.east.verizon.net> <200409072312.46887.RoKlein@roklein.de>
next in thread | previous in thread | raw e-mail | index | archive | help
Robert Klein wrote: > On Dienstag, 7. September 2004 23:02, Skip Ford wrote: > > brisbanebsd@mac.com wrote: > > > I need to set up MAC filtering on a 5.2.1 Freebsd box. > > > > Have you enabled it by setting net.link.ether.ipfw to 1? > > > > > ipfw add allow ip from any to any mac any 00:0d:93:81:82:1e > > > > Your rule works fine here. > > > > # ipfw add 10 allow ip from any to any mac 00:50:bf:d3:5a:2f > > any 00010 allow ip from any to any MAC 00:50:bf:d3:5a:2f any # > > ipfw show 10 > > 00010 0 0 allow ip from any to any MAC > > 00:50:bf:d3:5a:2f any # sysctl net.link.ether.ipfw=1 > > net.link.ether.ipfw: 0 -> 1 > > # ipfw show 10 > > 00010 351 514213 allow ip from any to any MAC > > 00:50:bf:d3:5a:2f any > > umm... if I think this should not work.. except you have > options IPFIREWALL_DEFAULT_TO_ACCEPT > in your kernel config file. Could you please check and tell us? No, it denies but I have other layer 3 rules that allow it. It didn't occur to me the OP was trying to hit both layers with a single rule. -- Skip
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040907214606.GA2502>