Shorewall users - Dec 2003 - blocking MAC

Hello,

I have made rules on my gateway in maclist and each MAC has one IP addres.
Now nobody from my network can connect to internet if there is no rule in
maclist. And it is good for my network (not very fast network). Each can
have only one computer in my network. But people are clever and made
gatways in they houses (they have bought second ethernet card to computer)
and now share internet with other computer/computers in they houses. I want
to block it. It is possible ?
My arp table on my gateway doesn''t show me them second MAC and IP but i
have
program in windows ''TcpNetView'' and it shows me on one host
two MAC''s and two
IP''s

host:         IP                           MAC
Angela        192.168.1.17, 192.168.1.98   00:08:JE:SA:84:DS,00:08:J7:SA:84:DF

When I want to ping second adress on my gateway i don''t wave reply.
I have rule in maclist only for 192.168.1.13 and 00:08:JE:SA:84:DS but
second IP now have also internet.
It is possible to block other copmuter ?

Best Wishes
Marek

Hello,

At 11:28 AM 12/3/2003, you wrote:
>(they have bought second ethernet card to computer)
>and now share internet with other computer/computers in they houses. I want
>to block it. It is possible ?

This does not tell us what they are doing ???

Are they setting up Internet Connection Sharing ???

Correct me if I am wrong here .. but ICS is kinda a poor persons router ..

You will not be able to block requests from behind it ..

I would just throttle the connection using Wondershaper .. Or Them

Francesca


"No Problems Only Solutions"
Francesca C. Smith
Lady Linux Internet Services
fsmith@ladylinux.com