Tom Eastep wrote: > Unless the client is on the same network as you are, MAC matching won't > work.
Yes, I do fairly remember, MAC adresses is restricted to my LAN ("on the same cable").
OK.
-- changing topic to DYNDNS --
Currently my FW accepts TCP connections only from myprivatnet.dyndns.info. So DYNDNS is a kind of (FTP)-Proxy to my firewall.
I hope I gain a little more security by restrict it as described. Others may not adress it directly by IP-adress. All incoming traffic to my firewall did pass "security-checks" from dyndns. (Before my firewall is flooded, dyndns is flooded ;-))
Yes, I know, there is hardly anyone out, who should be interested to flood my firewall.
As a second point of security I restricted FW2net (tcp) to dyndns only. loc2net is not restricted, only the firewall itself is restricted to members..something.dyndns.org (the dyndns-client needs contact to its server ;-))
comments welcome ;-)
------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
