Tag Info

New answers tagged

0

If what you like to do is something like that : [ Alice ] [ Charlie ] | | ADSL ---+-----+-------+------ dc0 [ OpenBSD ] fxp0 -------- ( Internet ) | [ Bob ] Then read this FAQ examples about configuring OpenBSD PF for this. Theses examples shows you how to apply egress and ingress shaping ...


0

To do that you have to tag the ethernet frame. (http://www.openbsd.org/faq/pf/tagging.html) Tagging can be performed at the Ethernet level if the machine doing the tagging/filtering is also acting as a bridge(4). By creating bridge(4) filter rules that use the tag keyword, PF can be made to filter based on the source or destination MAC address. Bridge(4) ...


3

No, there isn't. You know that it's trivial for people to change their MAC addresses, correct? Additionally, the instant a packet passes through a later 3 routing device, the Mac address information of the source machine is lost. So even if you did want to do something like this, it would only ever work for clients that are on the same L2 LAN as your ...



Top 50 recent answers are included