On Tue, Oct 22, 2002 at 10:55:26AM -0500, Scott Pilz typed: > > The answer to this is more than likely 'no'. > > But I'll try anyways. > > Setup: NATD/IPFW > > Say you have an IPFW rule to allow 10.0.0.2 through NATD - thus into the > internet - and everything else to be blocked. > > Your machine (10.0.0.2) that is being firewalled by NATD/IPFW works fine. > Then someone else sets their machine up to 10.0.0.2, and now they can also > get out into the network (there will of course be an ip conflict).
You can use arp(8) to make a permanent entry in the arp table on your NAT/Firewall box to prevent anyone else to use this IP address: arp -S 10.0.0.2 Your_machines_MAC > > My question is, for security, is there any way to use this type of block > based on MAC ID. Almost to bond the MAC ID to the IP Address so the only > computer that can use the IP address 10.0.0.2 is with MAC ID <whatever>? > > > Thanks, > > Scott > > > To Unsubscribe: send mail to [EMAIL PROTECTED] > with "unsubscribe freebsd-questions" in the body of the message To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-questions" in the body of the message
