very curious situation

Robert Klein RoKlein at roklein.de
Mon Aug 15 18:11:29 GMT 2005


vladone wrote:

>I want to block illegal acces to server with mac address.
>For testing i write this rules:
>
>ipfw add 100 deny mac any xx:xx:xx:xx:ab:12 in via $lif
>ipfw add 100 deny mac any xx:xx:xx:xx:ab:34 in via $lif
>
>$lif is private interface on my server.
>
>After i apply this rule result is strange. Computer with mac ..ab:12
>can make traffic but these with ab:34 no.
>I have withe hair.
>  
>
At a guess, both rules have number 100, so the second one overwrites the 
first one.

Regards,
Robert



More information about the freebsd-ipfw mailing list