Re: pf by mac address?

2006-01-24 Thread Badbanchi Hossein
with those packets as you wish! Regards, Amir -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Benfell Sent: Monday, January 23, 2006 06:09 To: misc@openbsd.org Subject: pf by mac address? Hello all, Perhaps I'm looking for this the wrong w

Re: pf by mac address?

2006-01-23 Thread Tobias Weingartner
On Sunday, January 22, David Benfell wrote: > > Is it possible? You have hostile users. They know how to change IP addresses. You want to block by another means they are able to change. Instead have a look at authpf. --Toby.

Re: pf by mac address?

2006-01-23 Thread David Benfell
On Mon, 23 Jan 2006 10:49:32 +0100, viq wrote: > > How about a different approach? Limit everyone by default, and then remove > limits via authpf. As someone somewhere said, ssh can be made into > "double-click here to be able to surf" ;) > *This* seems like it could work. I will look into it

Re: pf by mac address?

2006-01-23 Thread viq
On Monday 23 January 2006 06:08, David Benfell wrote: > So I'm thinking I'd like to be able to write packet filter rules based > on MAC address. I'm not necessarily going to want to simply cut off > all their Internet access, but pf offers a lot of options to do what I > think I might want to do,

pf by mac address?

2006-01-22 Thread David Benfell
Hello all, Perhaps I'm looking for this the wrong way. My local network now (and hopefully temporarily) includes hostile users. I may need to exercise controls on their Internet usage by machine. Now, I can certainly tell dhcpd to give certain machines certain IP addresses by reference to their

Never mind... Re: pf by mac address?

2006-01-22 Thread David Benfell
On Sun, 22 Jan 2006 21:08:34 -0800, David Benfell wrote: > > Perhaps I'm looking for this the wrong way. My local network now (and > hopefully temporarily) includes hostile users. I may need to exercise > controls on their Internet usage by machine. > Still what I think I'd like to do -- becaus