RB wrote:
On Fri, Feb 20, 2009 at 07:13, Gary Buckmaster
<[email protected]> wrote:
pfSense does not do firewalling based on MAC address.

Actually, it does, if indirectly.

Use the captive portal.  More than likely it fits your use case
anyway, but can also be used to enter static lists of allowed MAC
addresses that do not go through the captive page.  L2-attached users
will have MAC entries automatically created & destroyed for them by
the login process if you do not check the "Disable MAC filtering" box
in the CP configuration page.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Commercial support available - https://portal.pfsense.org


You're correct of course. I was trying to address his overriding question about using the firewall to do MAC level filtering, since that was his original query. The addition of Captive Portal (which uses ipfw to do the MAC filtering portion btw) to the mix is probably the correct answer for what he's trying to do, although he was not in any way especially clear in his initial or follow up queries on the subject. At this point, however, you and I are both in agreement and just clarifying our points.


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Commercial support available - https://portal.pfsense.org

Reply via email to