Re: how to filter network by MAC and IP at the same time

2012-06-09 Thread Bill Yuan
Thanks very much, According to your description , I changed my firewall settings , ( Because I already tried add the "via em0" or "via em1", it's not working, so I remove it , my FreeBSD is WAN is em0 ,LAN is em1 ) and made it like this below and I still cannot download things through it , and i

Re: how to filter network by MAC and IP at the same time

2012-06-09 Thread Christian Hiris
hi Bill, afaik, in your case the packets checked twice against the ipfw-rules - once for the layer2-filtering part and 2nd time for the ip-filtering part. 1st enable filtering on ethernet demux/eth. output frame: # sysctl net.link.ether.ipfw=1 then start your fw-script: # -- sniplet from fw-scr

Re: how to filter network by MAC and IP at the same time

2012-06-08 Thread Bill Yuan
rule like below #allow the traffic which source mac is belong to the machine ipfw add 1 allow all from any to any MAC any #allow the .. destination mac is that machine ipfw add 1 allow all from any to any MAC any ipfw add 1 deny all from any to any it is not working , all the traffic will

Re: how to filter network by MAC and IP at the same time

2012-06-08 Thread Lowell Gilbert
Bill Yuan writes: > i am using freebsd 9.0 as a firewall and i want to filter the traffic by > the mac and the ip at the same time, > > for example, i only allow my laptop can go throught the > firewalll when it's using IP > > for how to config the firewall rules? > > > I tried to configure the

how to filter network by MAC and IP at the same time

2012-06-07 Thread Bill Yuan
hi all, i am using freebsd 9.0 as a firewall and i want to filter the traffic by the mac and the ip at the same time, for example, i only allow my laptop can go throught the firewalll when it's using IP for how to config the firewall rules? I tried to configure the firewall by the rule belo