Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to secure my home network but don't really need the complexity of a VPN so I'm trying to figure out other options.

I'd like to allow my iPhone remote access to my home servers but I can't depend on the IP address because it changes quite often (due to the 3G network, etc).

Can I filter incoming connections on my router (pfsense) by MAC address or does NAT change the source as it's passing through the different routers on the internet?

share|improve this question

closed as off topic by Bryan, Magellan, Iain Nov 25 '12 at 15:19

Questions on Server Fault are expected to relate to server, networking, or related infrastructure administration within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

up vote 2 down vote accepted

No, you can not - MAC addresses are only valid within the same phsyical segment. As in: between your router and your providers router etc. They are NOT part of IP packets at all.

If your IP changes often, use a service like dyndns.

share|improve this answer
Thanks. That's the answer I was looking for but I'll have to look for another solution... Also, DynDNS is only useful for the server not the client. Is there any other way to uniquely identify my iPhone? – SofaKng May 27 '10 at 14:26
It's not NAT that changes the MAC address, it's a function of layer 2 of the OSI model, regardless of whether or not NAT is in use. MAC addresses are only locally significant, as TomTom stated. – joeqwerty May 27 '10 at 23:59

I believe a VPN is exactly what you're looking for. This would allow your iPhone to connect to your local LAN over the internet, and it works via authentication, so it doesn't matter what IP your iPhone has.

share|improve this answer

DynDNS wont do much as you are trying to get in not browse out. Perhaps use port forwarding. Publish connections on any unknown port and forward to your desired service. Try not to use the server service to get in. Services like Remote desktop and WWW can be reconfigured to use different ports. There are certain routers (ADSL/Wireless) that provide great alternative to port forwarding.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.