Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a debian server that acts as a router for a network, and I am planning on making it so I am able to block network access for certain computers, what do you think would be the best way to do it? I was thinking mac address filtering, although that could be spoofed. I was also thinking of IP filtering, but that could be avoiding just as easily. A few pages on google suggested doing something with arp tables, but im not sure how to go about doing that. Any help is much appreciated, thanks!

share|improve this question

marked as duplicate by Michael Hampton, Evan Anderson, John Gardeniers, Khaled, Iain Feb 16 '13 at 10:26

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

    
    
I'm not sure I'd go "not constructive" on this one. Exact duplicate is a better fit, I think. – Evan Anderson Feb 16 '13 at 4:10
up vote 3 down vote accepted

You're looking for layer 2 authentication, as in IEE 802.1X, on your switches or wireless access points. There's nothing that you can do on a gateway device (router, firewall, etc) to prevent layer 2 or layer 3 "spoofing". You need an authentication mechanism that operates on the layer 2 device to authenticate trusted devices.

share|improve this answer
    
thanks for the info! – lacrosse1991 Feb 17 '13 at 1:43

Not the answer you're looking for? Browse other questions tagged or ask your own question.