Stephen GL wrote:
[ ... ]
I am very new about IPFW. I'm in FreeBSD 6.0.
My job is pass anyone that has a valid both MAC and IP address.
Beginning of my rule I check the valid MAC address that can get through.
If pass, the next rule is check the IP address.
If pass, he/she can get through.
Everything is work as expected. My problem is the above rules doesn't check
both MAC and IP address pairing. Assume someone spoof other MAC address, they
can pass by changing the IP address of another.
The way to deal with people who screw up your network by spoofing the MAC and
IP address of another machine is to fire them or drop them as a customer,
depending on the relationship.
However, if you really need to provide IP access to people whom you can't
trust not to play such games, consider switching to something which requires
authentication, such as PPPoE.
--
-Chuck
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
