> Hi All,
> I want to set up a linux box to act as a proxy/router between a
> private network and a public one. Very simple, two interfaces in my
> box, etc... The catch is that I want to restrict who can access the
> public side, and I want to do this restriction by Mac Address. Is this
> possible?
> Any advice/help is greatly appreciated.
I haven't heard of using the MAC address, as that's not something
normally available at the IP level. However, you certainly could
filter on IP address. If you're worried about someone changing their
IP, to get past the firewall, one thing you could do, is monitor the
arp cache periodically, to ensure the IP and MAC match what they're
supposed to be.
--
james.knott.