> Hi, does anybody know how to filter packets base on the machine MAC address ?
> Here is the situation:
> In one midle size LAN, there are some workstations that should be able to
> contact others from outside this LAN, but there is also one group of machines
> that should not be able to see any other machine outside this LAN.
> There is no control on the configuration this restricted machine can have,
> users may be able to change.
> any help will be greatly apreciated
>
It would be possible to do this, but I don't understand why
you'd want to. As you note, "there is no control on the configuration",
so the MAC address can be changed as readily as the layer 3 address
(e.g. IP).
--
W.C. Epperson "I have great faith in fools.
Chief of Systems Engineering Self-confidence, my friends call it."
Security Officer Emeritus --Edgar Allen Poe--
Curmudgeon-for-Life
Virginia Dept. of Education
[EMAIL PROTECTED]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
