Re: blocking trough MAC Address

2002-10-29 Thread Sasha Nedvedicky
one note to this topic: anyone, who has root access to machine atteched to LAN, can setup any arbitrary MAC address to ethernet interface by using ifconfig command. so building access/accounting rules upon MAC addresses does not guarantee enhanced security/reliab

Re: blocking trough MAC Address

2002-10-29 Thread Sasha Nedvedicky
one note to this topic: anyone, who has root access to machine atteched to LAN, can setup any arbitrary MAC address to ethernet interface by using ifconfig command. so building access/accounting rules upon MAC addresses does not guarantee enhanced security/reliabil

Re: blocking trough MAC Address

2002-10-25 Thread UnKnown
Ok Thanks to all, I got some work ahead but the path is clearer now. Thanks, rak

Re: blocking trough MAC Address

2002-10-25 Thread UnKnown
Ok Thanks to all, I got some work ahead but the path is clearer now. Thanks, rak -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

RE: blocking trough MAC Address

2002-10-25 Thread frederic baujard
Hi, Iptables can block an specific MAC address with options iptables -A INPUT -m mac --mac-source 00:00:00:00:00:01 -j DROP you can used too ! for inverse. PS: Sorry for my english !!! > -Message d'origine- > De : UnKnown [mailto:[EMAIL PROTECTED] > Envoye : vendredi 25 octobre 200

Re: blocking trough MAC Address

2002-10-25 Thread Teun Vink
On Fri, 2002-10-25 at 15:31, Maarten Vink wrote: > As far as I know, there's an iptables module that allows you to match on > MAC addresses. I've seen it several times when compiling a new kernel... > Haven't used it yet though. > Yeah there is: CONFIG_IP_NF_MATCH_MAC Then you can do things li

Re: blocking trough MAC Address

2002-10-25 Thread Moti Levy
that's from the howto - " Other Match Extensions The other two extensions in the netfilter package are demonstration extensions, which (if installed) can be invoked with the `-m' option. mac This module must be explicitly specified with `-m mac' or `--match mac'. It is used for matching incom

Re: blocking trough MAC Address

2002-10-25 Thread Maarten Vink
UnKnown wrote: Hi people, does any body knows if there is a soft like iptables, but instead of blocking using ip's, block an specific MAC address. Thanks, rak As far as I know, there's an iptables module that allows you to match on MAC addresses. I've seen it several times when compilin

RE: blocking trough MAC Address

2002-10-25 Thread frederic baujard
Hi, Iptables can block an specific MAC address with options iptables -A INPUT -m mac --mac-source 00:00:00:00:00:01 -j DROP you can used too ! for inverse. PS: Sorry for my english !!! > -Message d'origine- > De : UnKnown [mailto:rak@;burst.fcien.edu.uy] > Envoye : vendredi 25 octo

Re: blocking trough MAC Address

2002-10-25 Thread Teun Vink
On Fri, 2002-10-25 at 15:31, Maarten Vink wrote: > As far as I know, there's an iptables module that allows you to match on > MAC addresses. I've seen it several times when compiling a new kernel... > Haven't used it yet though. > Yeah there is: CONFIG_IP_NF_MATCH_MAC Then you can do things li

Re: blocking trough MAC Address

2002-10-25 Thread Moti Levy
that's from the howto - " Other Match Extensions The other two extensions in the netfilter package are demonstration extensions, which (if installed) can be invoked with the `-m' option. mac This module must be explicitly specified with `-m mac' or `--match mac'. It is used for matching incom

Re: blocking trough MAC Address

2002-10-25 Thread Maarten Vink
UnKnown wrote: Hi people, does any body knows if there is a soft like iptables, but instead of blocking using ip's, block an specific MAC address. Thanks, rak As far as I know, there's an iptables module that allows you to match on MAC addresses. I've seen it several times when compiling