ipchains and mac address

[Mike Starke]

A couple firewalling questions:
We just got a T1 and I am trying to exercise a bit more
control over our bandwidth. Two things I would like to know:
How can I restrict masquerading by mac address?
How can I regulate bandwidth; either by user mac adress,
or protocol?

For instance, I use ipchains to regulate who gets out
and who doesn't by their ipadress. Any way to regulate
by their distinct mac address?

ALso, how can I "throttle" certain users back. SOme users
are just hogging the bandwidth by grabbing all the mp3's they
can while at work.

Always appreciate the help.

Mike
mgcon@getnet.com
http://www.getnet.com/~mgcon
Phoenix, AZ
USA