Bem, retirado das docs do OpenBSD packet filter:
http://www.openbsd.org/faq/pf/tagging.html
Segue treicho abaixo:
Tagging Ethernet Frames
Tagging can be performed at the Ethernet level if the machine doing
the tagging/filtering is also acting as a bridge(4). By creating
bridge(4) filter rules that use the tag keyword, PF can be made to
filter based on the source/destination MAC address. Bridge(4) rules
are created using the brconfig(8) command. Example:
# brconfig bridge0 rule pass in on fxp0 src 0:de:ad:be:ef:0 \
tag USER1
And then in pf.conf:
pass in on fxp0 tagged USER1
--
Atenciosmente
Mario Augusto Mania <m3BSD>
-----------------------------------------------
[EMAIL PROTECTED]
Cel.: (43) 9938-9629
Msn: [EMAIL PROTECTED]
-------------------------
Histórico: http://www.fug.com.br/historico/html/freebsd/
Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd