[Firehol-support] MAC filtering

[Carlos Rodrigues]

On 3/25/07, Ryan Krauss <ryanlists at gmail.com> wrote:
> I want to use ssh with unison between my laptop and my office
> computer.  Both have DHCP IP's.  The laptop is connecting through the
> campus wide wireless network.  I would like to open ssh only to my
> laptop.  Can I do this based on the MAC address of my laptop, since
> its IP will change frequently?  If this is possible, can someone give
> me a simple example please.  Basically, I want a rule that my desktop
> would only accept ssh from the MAC address of my laptop.

route ssh accept mac "00:11:22:33:44:55:66"

However, this only works if both machines are on the same ethernet
segment. If there's any routing between them, the desktop won't see
the laptop's MAC address and there's no way around this.

-- 
Carlos Rodrigues