Todd Johnson wrote:

> It appears that a drop rule would best meet my needs would be:
> DROP:info     wifi:~00-16-cb-bf-8e-fa all     all
>
> I would probaly make this a list of mac address in the params.
> 
> Would this be efficent, reasonable, and recomended? Is there a better
> way?

In Shorewall 3.2, the maclist file has been extended to allow specification of a
DISPOSITION on each rule. I would recommending using that approach.

-Tom

Note: While the comments in the file don't mention it, the DISPOSITION may be
followed by ":" and a log level. See http://shorewall.net/MAC_Validation.html.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to