Kelley Reynolds wrote:
Is there any way to filter based on MAC addresses for a single-interface machine running in a wireless WDS configuration? From the docs, it doesn't look like a single-interface bridge will work like that, if it would work at all.
in my system:
client------- client bridge ------ access point --------[xl0]obsd [fxp0] ------ internet
# cat /etc/bridgename.bridge0 add xl0 -discover xl0 -learn xl0 static xl0 00:80:48:30:6f:de up rule pass in on xl0 src xl0 00:80:48:30:df:de tag client1 rule block in on xl0
i do traffic shaping based on client ip address and to prevent them change their ip address
# cat /etc/pf.conf block in quick on xl0 from ! 192.168.0.123 to any tagged client1
