blocking MAC address with ipfw ?

Sandy Rutherford sandy at krvarr.bc.ca
Tue May 3 02:20:28 PDT 2005


>>>>> On Mon, 02 May 2005 20:26:03 -0700, 
>>>>> John Pettitt <jpp at cloudview.com> said:

 > faisal gillani wrote:
 >> faisal gillani wrote:
 >> 
 >> how can i block a MAC address with ipfw ?
 >> can you share the syntax please ?
 >> 
 >> 
 >> thanks
 >> 
 > man ipfw reveals ...

 >             { MAC | mac } dst-mac src-mac
 >              Match packets with a given dst-mac and src-mac addresses,
 > speci-
 > ...

You also need to make sure that the sysctl variable
net.link.ether.ipfw is set to 1 to enable layer 2 checks.

Sandy


More information about the freebsd-questions mailing list