Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 29 Jun 2002 23:21:32 +0300
From:      "Andrew Novikov" <perl@ukrpost.net>
To:        freebsd-questions@freebsd.org
Subject:   Re: when will this happen?
Message-ID:  <afl4sd$5c5$1@news.lucky.net>
References:  <Pine.LNX.4.44.0206291439080.2595-100000@westhost10.westhost.net.lucky.freebsd.questions>

next in thread | previous in thread | raw e-mail | index | archive | help
Hello, William.
You wrote to Lord Raiden on Sat, 29 Jun 2002 19:47:19 +0000 (UTC):

 >>          Actually, I like that Idea.  I'm definitely interested too
 >> when  this will happen.  Plus, I'd be curious if IPFW also supported
 >> filtering my
 >> Mac Address.  If not, it should be something to consider.  IT would
 >> help  keep out pesky script kiddies who keep the same modem or nic
 >> card, but  constantly change IP's.  :)
 WP> How can this happen/be useful when almost all the time the people
 WP> you want to filter out are not on the same Ethernet network as you?
 WP> Remember, from the point of view of your Internet facing nic, almost
 WP> every IP address is the world is associated with only one MAC
 WP> address, that of your managed switch.

  But what if you have to limit users IN your network to some bandwidth
or prohibit some users use NAT (let them use proxy!) It's a problem
when you have dhcp.
  You can use arp -S <IP> <MAC> to force machine with given <MAC>
have <IP>. Even if another user will try to configure his machine to
have that <IP> he won't be able to use it.

With best regards, Andy Novikov.  E-mail: perl@ukrpost.net


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?afl4sd$5c5$1>