Shorewall users - Nov 2003 - MAC address allow/bloc

hi friends , 

I''m trying to make dhcp server that is runs in a LAN . this LAN having
5 no: of Windows 2000 dhcp clents . DHCP server is Red Hat Linux 8 PC .
This dhcp function runnig well , it allow ip, dns , for each machine .

If i fixed another machine to the network , that one also taking the ip and all
from the dhcp server .( becaus that pc also under the dhcp concept )

but don''t want to do that , i need to block such users . so now u can
say , u can block / allow such users by there MAC address using the same dhcp
configuaration file . Normally it can . If this network support more clients (
More than 1000 ), we have to add them manually assingned a ip for each . So that
is out of the main dhcp concept.

Now i trying to block them using iptables firewall . 
iptables drop all MAC
iptabels allow aa:ss:rr:tt:yy

so like wise can i do the MAC address blocking using shorewall / iptables ?

fiannly i trying to implement this concept to cable modem system .

so pls help , exactly i need ur help .

thank u

Shorewall allows you to allow/block based on MAC.

Have a look at http://www.shorewall.net/MAC_Validation.html

Venkatesh K

----- Original Message ----- 
From: "curlybraces" <curlybraces@dialogsl.net>
To: "Shorewall" <shorewall-users@lists.shorewall.net>
Sent: Friday, November 21, 2003 7:26 AM
Subject: [Shorewall-users] MAC address allow/bloc


hi friends ,

I''m trying to make dhcp server that is runs in a LAN . this LAN having
5 no:
of Windows 2000 dhcp clents . DHCP server is Red Hat Linux 8 PC .
This dhcp function runnig well , it allow ip, dns , for each machine .

If i fixed another machine to the network , that one also taking the ip and
all from the dhcp server .( becaus that pc also under the dhcp concept )

but don''t want to do that , i need to block such users . so now u can
say ,
u can block / allow such users by there MAC address using the same dhcp
configuaration file . Normally it can . If this network support more clients
( More than 1000 ), we have to add them manually assingned a ip for each .
So that is out of the main dhcp concept.

Now i trying to block them using iptables firewall .
iptables drop all MAC
iptabels allow aa:ss:rr:tt:yy

so like wise can i do the MAC address blocking using shorewall / iptables ?

fiannly i trying to implement this concept to cable modem system .

so pls help , exactly i need ur help .

thank u

_______________________________________________
Shorewall-users mailing list
Post: Shorewall-users@lists.shorewall.net
Subscribe/Unsubscribe:
https://lists.shorewall.net/mailman/listinfo/shorewall-users
Support: http://www.shorewall.net/support.htm
FAQ: http://www.shorewall.net/FAQ.htm

On Fri, 21 Nov 2003, curlybraces wrote:
> 
> so like wise can i do the MAC address blocking using shorewall / iptables ?
> 
So why don''t you look at the Shorewall documentation?

a) Go to http://shorewall.net
b) On the left is a menu item in bolt font called "Documentation";
click
on that.
c) You now see an alphabetical index; go down to the "M"s and you will
see
"MAC verification"; click on that.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net