Re: ipfw using

2003-10-09 Thread Michael L. Hostbaek
[EMAIL PROTECTED] (traore) writes:
 
 Pls 
 Let me know how use ipfw with adress MAC bloking syntaxe.
 

from 'man ipfw' :
{ MAC | mac } dst-mac src-mac

Match packets with a given dst-mac and src-mac addresses,
specified as the any keyword (matching any MAC address), or six
groups of hex digits separated by colons, and optionally followed
by a mask indicating how many bits are significant, as in

   MAC 10:20:30:40:50:60/33 any

Note that the order of MAC addresses (destination first,
source second) is the same as on the wire, but the opposite of the
one used for IP addresses.

/mich


-- 
Best Regards,
Michael L. Hostbaek 
[EMAIL PROTECTED] - http://www.FreeBSD.org

*/ PGP-key available upon request /*


pgp0.pgp
Description: PGP signature


Re: ipfw using

2003-10-09 Thread Lowell Gilbert
Michael L. Hostbaek [EMAIL PROTECTED] writes:

 [EMAIL PROTECTED] (traore) writes:

 from 'man ipfw' :
 { MAC | mac } dst-mac src-mac

But note that this is only available in ipfw2, which is not the
default in FreeBSD 4.x.  The same manual page describes how to compile
it into your kernel.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: ipfw using

2003-10-09 Thread traore
When i compile my kernel with ipfw2 and add the follow rule:

ipfw add 200 deny mac 12:2d:00:25:23:14 any

the folow message appers:
ipfw: getsocketopt(IP_FW_ADD): Invalid argument



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]