Definitely have a look at iptables.
It is new interface to the 2.4 kernel for
firewall use.  It is much more powerful then
ipchains.

The Wolf

-> -----Original Message-----
-> From: J.L.Francois [mailto:frenchie@magusnet.gilbert.az.us]
-> Sent: Tuesday, July 11, 2000 3:59 PM
-> To: plug-discuss@lists.PLUG.phoenix.az.us
-> Subject: Re: ipchains -> mac address?
-> 
-> 
-> It seems like on Tue, Jul 11, 2000 at 03:39:00PM -0700, Mike 
-> Starke scribbled:
-> Orig Msg> I know I have always regulated my "firewall" using ipchains
-> Orig Msg> and an ip address.  Is there any way I can regulate which
-> Orig Msg> users I forward thru using their mac address? Any 
-> suggestions?
-> Orig Msg> 
-> Orig Msg> Mike
-> Orig Msg> mgcon@getnet.com
-> Orig Msg> http://www.getnet.com/~mgcon
-> Orig Msg> Phoenix, AZ
-> Orig Msg> USA
-> 
-> I know that under Linux the MAC can be changed to any value
-> so this may not be the best way to handle this.
-> 
-> It is also kind of a maint headache to have to manage a Linux
-> user that is always testing out different NICs.
-> I have a box full of them that I keep switching around just to test
-> throughput on different kernels.
-> 
-> So, can I ask why you want to do it by MAC instead of IP?
-> 
-> NOTE: IPTABLES in Kernel 2.4.x should have support for this.
-> 
-> JLF Sends...
-> MagusNet,Inc. fights UCE/UBE/SPAM: http://www.imrss.org/dssl 
-> http://maps.vix.com  http://www.orbs.org , http://www.mail-abuse.org
-> http://www.iks-jena.de/mitarb/lutz/usenet/teergrube.en.html
-> Got Anonymity on the Internet? http://www.magusnet.com/proxy.html
-> 
-> 
-> _______________________________________________
-> Plug-discuss mailing list  -  Plug-discuss@lists.PLUG.phoenix.az.us
-> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
->