Bem, retirado das docs do OpenBSD packet filter:

Segue treicho abaixo:
Tagging Ethernet Frames
Tagging can be performed at the Ethernet level if the machine doing
the tagging/filtering is also acting as a bridge(4). By creating
bridge(4) filter rules that use the tag keyword, PF can be made to
filter based on the source/destination MAC address. Bridge(4) rules
are created using the brconfig(8) command. Example:

    # brconfig bridge0 rule pass in on fxp0 src 0:de:ad:be:ef:0 \
       tag USER1

And then in pf.conf:

    pass in on fxp0 tagged USER1


Mario Augusto Mania <m3BSD>
Cel.: (43) 9938-9629
Sair da lista:

Responder a