Stefan Kell wrote:
some other questions: why a bridge and why not simple router with pf? What is 
your bridge configuration?

vr0 is internal interface. ral0 is wireless interface.

brconfig bridge0 add ral0
brconfig bridge0 add vr0
brconfig bridge0 rulefile /etc/bridge0.rules

/etc/bridge0.rules:

pass in on ral0 src 11:de:ad:be:ef:11
pass out on vr0 dst 11:de:ad:be:ef:11
block in/out on ral0

As to why the bridge? I'm not aware of any other way to use MAC filtering to limit access to the external interface.

Regards,
Brian

Reply via email to