Re: [CentOS] iptables rule (MAC filtering)

2007-06-25 Thread Jordi Espasa Clofent
127.x is always private to each host, so it is confusing. I just assumed it was one address that just came to your mind. Ok. It's a typo: I wanted to write 172.26.0.0/24 :P MAC addresses are easy too, only less known. Yes, of course. Almost for advanced users or sysadmins. But in this

Re: [CentOS] iptables rule (MAC filtering)

2007-06-25 Thread Luciano Rocha
On Mon, Jun 25, 2007 at 09:46:22PM +0200, Jordi Espasa Clofent wrote: > > > ^ this is a very bad example > > > > It's understandable example; so, it's enough. 127.x is always private to each host, so it is confusing. I just assumed it was one address that just ca

Re: [CentOS] iptables rule (MAC filtering)

2007-06-25 Thread Jordi Espasa Clofent
^ this is a very bad example It's understandable example; so, it's enough. Why MAC and not IP addresses? IP addresses are very easy to change. The idea is only a two concrete boxes with a concrete ubication can surfer the web freely. Yes, but ORing th

Re: [CentOS] iptables rule (MAC filtering)

2007-06-25 Thread Luciano Rocha
On Mon, Jun 25, 2007 at 06:20:04PM +0200, Jordi Espasa Clofent wrote: > Hi all, > > I've a CentOS box which as two NIC; this box is also a router for LAN > subnet: > > > | eth0 (external) 172.0.0.1| ^ this is a very bad e

[CentOS] iptables rule (MAC filtering)

2007-06-25 Thread Jordi Espasa Clofent
Hi all, I've a CentOS box which as two NIC; this box is also a router for LAN subnet: | eth0 (external) 172.0.0.1| | eth1 (internal) 192.168.1.1 | | LAN clients (192.168.1.2+) I want to allow http acces