Shorewall users - Oct 2003 - Traficcontroll by MAC-Address - Performance

Hi,

I have the problem, that sometimes studens unplug our computers from the 
LAN and use the IP Configuration of this computer for there own laptop 
to surf in the internet.

Af far as I can remember, I can set the hosts which are allowed to 
connenct to the internet by MAC-Address in the shorewall-configuration.

Now the big question: How performance killing would this be for about 
200 Hosts? :-)

So I was thinking of denying all hosts by default, allowing thous I do 
have the MAC address.

Any comments??

So long!

G?tz
-- 
G?tz Reinicke
IT Koordinator - IT OfficeNet

Tel. +49 (0) 7141 - 969 420
Fax  +49 (0) 7141 - 969 55 420
goetz.reinicke@filmakademie.de

Filmakademie Baden-W?rttemberg
Mathildenstr. 20
71638 Ludwigsburg
www.filmakademie.de

Hello G?tz

On Thu, 2003-10-23 at 23:24, G?tz Reinicke wrote:
> Now the big question: How performance killing would this be for about 
> 200 Hosts? :-)
> 
> So I was thinking of denying all hosts by default, allowing thous I do 
> have the MAC address.
> 
> Any comments??
The average connection request from your local network would pass
through 100 additional rules.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net