[Firehol-support] MAC filtering

[Ryan Krauss]

Thanks Carlos.  That worked really easily on my home network - my
laptop can connect to the desktop and my wife's can't.  I will try it
Monday at work and see if I have the problem you mentioned about the
desktop not seeing the MAC because of routing between them.  It sounds
like it probably won't work and I will just have to restart  FireHOL
each time when I know the IP assigned to my laptop.

On 3/25/07, Carlos Rodrigues <carlos.efr at mail.telepac.pt> wrote:
> On 3/25/07, Ryan Krauss <ryanlists at gmail.com> wrote:
> > I want to use ssh with unison between my laptop and my office
> > computer.  Both have DHCP IP's.  The laptop is connecting through the
> > campus wide wireless network.  I would like to open ssh only to my
> > laptop.  Can I do this based on the MAC address of my laptop, since
> > its IP will change frequently?  If this is possible, can someone give
> > me a simple example please.  Basically, I want a rule that my desktop
> > would only accept ssh from the MAC address of my laptop.
>
> route ssh accept mac "00:11:22:33:44:55:66"
>
> However, this only works if both machines are on the same ethernet
> segment. If there's any routing between them, the desktop won't see
> the laptop's MAC address and there's no way around this.
>
> --
> Carlos Rodrigues
>