how to reject all mac addresses except some mac addresses using ipfw?

[Chris St Denis]

Yavuz Maslak wrote:
> I use ipfw on freebsd7.
>
> I have two questions
>
> 1- I want to fix an ip address for each mac address. But some pc and servers have more than an ip address. How can I map multiple ip addresses for a mac address?
> 2- I want to allow these fixed mac addresses using ipfw. After that I want to deny all mac address via the server's local ethernet card.  How can I do these cases?
>
> Thanks
>
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
>
>   
I haven't used ipfw for mac level filtering before, but it looks like 
the syntax is.

ipfw add allow MAC <mac address> any
ipfw add allow MAC <mac address> any
ipfw add allow MAC <mac address> any
ipfw add deny MAC any any

You'll probably have to include the server's own MAC in that list.


-- 
Chris St Denis
Programmer
SmarttNet (www.smartt.com)
Ph: 604-473-9700 Ext. 200
-------------------------------------------
"Smart Internet Solutions For Businesses"