ipfw + MAC nothing happens?

2005-01-08 Thread heath, Chia Hui Chen
Hello,
I use FreeBSD 5.2.1 as NAT.
I wanna limit the 443 port of a computer based on MAC address.
So I use ipfw.
# ipfw add 500 deny tcp from any to any 443 MAC any 00:e0:18:62:xx:xx
But nothing happens, can anybody tells me why?
Thanks for your response.

Best Regards,
- heath
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ipfw + MAC nothing happens?

2005-01-08 Thread heath, Chia Hui Chen
my ipfw rules is:

00050 divert 8668 ip from any to any via fxp0
00100 allow ip from any to any via lo0
00200 deny ip from any to 127.0.0.0/8
00300 deny ip from 127.0.0.0/8 to any
00500 deny tcp from any to any dst-port 443 MAC any 00:e0:18:62:xx:xx
65000 allow ip from any to any
65535 deny ip from any to any

- Original Message - 
From: heath, Chia Hui Chen 
To: freebsd-questions@freebsd.org 
Sent: Saturday, January 08, 2005 9:22 PM
Subject: ipfw + MAC nothing happens?


Hello,
I use FreeBSD 5.2.1 as NAT.
I wanna limit the 443 port of a computer based on MAC address.
So I use ipfw.
# ipfw add 500 deny tcp from any to any 443 MAC any 00:e0:18:62:xx:xx
But nothing happens, can anybody tells me why?
Thanks for your response.

Best Regards,
- heath
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


How can I limit some port according to ethernet card MAC?

2005-01-07 Thread heath, Chia Hui Chen
Hello,
I use FreeBSD 5.2.1 as NAT.
How can I limit some port (packet in and out) according to ethernet card MAC
?
Because we use dhcpd, and the IP is dynamic, so I wanna limit it by MAC.
What can I do? Thanks for your response!

Best Regards,
- heath

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]