Re: Block PC using Mac address in squid

On 30Jan2008 18:51, dbcooper <dclinuxlist@xxxxxxxxx> wrote:
| You do know that you can't block a MAC address once it crosses a router, as
| MAC is layer 2 only.
| Unless your just doing this on your local LAN etc.

Of course, but the OP's first problem is that squid rejects his ACL
so he can't even try:-)
--
Cameron Simpson <cs@xxxxxxxxxx> DoD#743
http://www.cskk.ezoshosting.com/cs/

Network Planning Constraint Of The Month:
You can't send bits over a non-existant link.
- Valdis Kletnieks <valdis@xxxxxxxxxxxxxxx>

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

Relevant Pages

  • Re: Block MAC-Address on a 2851 Router?
    ... Yes, you can block a MAC on a Router using ACL's, however there are ... Router and not a Layer 3 Switch, where the method is likely to be ... A MAC is a Layer 2 construction, so while you can build a MAC ACL ... drop the interface down to Layer 2 by putting that PORT into BRIDGE ...
    (comp.dcom.sys.cisco)
  • Re: Sky Broadband + Linux
    ... The remote device must know the MAC address or it wouldn't be able to send the layer 3 traffic to the right place. ... What you/Whiskers may be thinking of, IIRC is that some isp uses the MAC of their preconfigured router or something derived from it, as your ppp logon user name. ...
    (uk.comp.os.linux)
  • Re: Can You Explain This iptables Rule?
    ... > Is it possible to specify computer As MAC in an iptables rule even ... > though a router is in between A and B? ... MAC (layer 2) addresses are only visible on local networks. ...
    (comp.os.linux.security)
  • Re: UDP Broadcast traffic?
    ... There are two MAC addresses listed in the trace, ... But without a router, not sure how the traffic would bridge the two ... If the two networks have a layer 2 connection between them in addition ...
    (comp.dcom.sys.cisco)
  • Re: WatchGuard FireBox III?
    ... >> clone the original computer's NIC MAC that was provisioned with the ... >> ISP into the router. ... an OUI (Organizationally Unique ... Identifier) which indicates the manufacturer of the network adapter, ...
    (comp.security.firewalls)