Re[2]: i can't block win98 computers

2005-08-17 Thread vladone
Problem solved. I have two rules that refer at MAC. 1. allow arp traffic 2. block illegal mac If i put first rule 1 and then rule 2 i can block only XP computers. If inverse this order can block any computer. If anyone can explain this :). But work in this mode. P.S. I can't put an rule to deny

Re[4]: i can't block win98 computers

2005-08-17 Thread vladone
This is true with posibility to change MAC address. Will try to implement some pppoe solutions for that. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL

Re[2]: i can't block win98 computers

2005-08-16 Thread vladone
Thanks all for reply! Now: 1. i try to permit only good mac and deny any else but not work. Win98 still have internet. 2. one solution is probably to block acces for win98 computers to any on port 53 and block in this mode DNS service, but is a little strange this solution. 3. i dont understand

Re: i can't block win98 computers

2005-08-16 Thread Greg Barniskis
vladone wrote: Thanks all for reply! Now: 1. i try to permit only good mac and deny any else but not work. Win98 still have internet. 2. one solution is probably to block acces for win98 computers to any on port 53 and block in this mode DNS service, but is a little strange this solution.

Re[2]: i can't block win98 computers

2005-08-16 Thread vladone
My server has an Athlon XP CPU at 1.6 Ghz with 256 mb ram. Don't believe that this is the reason for which don't goes tcpdump. Every client has his ip, but i want to prevent illegal connections, and this can be changed. ___ freebsd-questions@freebsd.org

Re[3]: i can't block win98 computers

2005-08-16 Thread Hexren
My server has an Athlon XP CPU at 1.6 Ghz with 256 mb ram. Don't believe that this is the reason for which don't goes tcpdump. Every client has his ip, but i want to prevent illegal connections, and this can be changed. - Changing the MAC is not

Re: i can't block win98 computers

2005-08-16 Thread Greg Barniskis
vladone wrote: My server has an Athlon XP CPU at 1.6 Ghz with 256 mb ram. Don't believe that this is the reason for which don't goes tcpdump. That ought to work. Still, every time I've seen tcpdump dropping packets, it's a load issue. For some options you could test to improve tcpdump

i can't block win98 computers

2005-08-15 Thread vladone
Hi! I try to block some computers to acces my gateway based on MAC address. I use this ipfw rule: ipfw add 100 deny mac any xx:yy:aa:bb:cc:dd in via $private_interface With this i can block XP computers but not work with Win98. I dont understand what is happened! I try against different computer

Re: i can't block win98 computers

2005-08-15 Thread Roland Smith
On Mon, Aug 15, 2005 at 11:28:10PM +0300, vladone wrote: Hi! I try to block some computers to acces my gateway based on MAC address. I use this ipfw rule: ipfw add 100 deny mac any xx:yy:aa:bb:cc:dd in via $private_interface With this i can block XP computers but not work with Win98. I

Re: i can't block win98 computers

2005-08-15 Thread Hornet
On 8/15/05, vladone [EMAIL PROTECTED] wrote: Hi! I try to block some computers to acces my gateway based on MAC address. I use this ipfw rule: ipfw add 100 deny mac any xx:yy:aa:bb:cc:dd in via $private_interface With this i can block XP computers but not work with Win98. I dont

Re: i can't block win98 computers

2005-08-15 Thread Andrew L. Gould
On Mon, 15 Aug 2005 17:19:49 -0400 Hornet [EMAIL PROTECTED] wrote: On 8/15/05, vladone [EMAIL PROTECTED] wrote: Hi! I try to block some computers to acces my gateway based on MAC address. I use this ipfw rule: ipfw add 100 deny mac any xx:yy:aa:bb:cc:dd in via $private_interface

Re: i can't block win98 computers

2005-08-15 Thread Greg Barniskis
Roland Smith wrote: On Mon, Aug 15, 2005 at 11:28:10PM +0300, vladone wrote: Hi! I try to block some computers to acces my gateway based on MAC address. I use this ipfw rule: ipfw add 100 deny mac any xx:yy:aa:bb:cc:dd in via $private_interface With this i can block XP computers but not work