> -------- Original Message -------- > Subject: [FUG-BR] Filtrando MAC com o pf > From: "m3 BSD" <[EMAIL PROTECTED]> > Date: Sat, September 09, 2006 1:55 pm > To: "Lista_Brasileira_de_Discussão_sobre_FreeBSD_(FUG-BR)" > <freebsd@fug.com.br> > > Bem, retirado das docs do OpenBSD packet filter: > http://www.openbsd.org/faq/pf/tagging.html
Ja existe documentacao em portugues: http://www.openbsd.org/faq/pf/pt/tagging.html > Segue treicho abaixo: > Tagging Ethernet Frames > Tagging can be performed at the Ethernet level if the machine doing > the tagging/filtering is also acting as a bridge(4). By creating > bridge(4) filter rules that use the tag keyword, PF can be made to > filter based on the source/destination MAC address. Bridge(4) rules > are created using the brconfig(8) command. Example: > > # brconfig bridge0 rule pass in on fxp0 src 0:de:ad:be:ef:0 \ > tag USER1 > > And then in pf.conf: > > pass in on fxp0 tagged USER1 Vale lembrar que o pf nao faz filtro por mac, quem captura os end. mac e' o brconfig e voce _precisa_ ter uma bridge configurada, o que nao se ve na maioria dos casos.
------------------------- Histórico: http://www.fug.com.br/historico/html/freebsd/ Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd
