From: "Мерзляков Евгений Анатольевич" <hj@acoustics.ru>
To: "Alexey S. Kuznetsov" <buster@kuznetsov.org.ua>,
ALT Linux Community <community@lists.altlinux.org>
Cc: community@lists.altlinux.org
Subject: Re: [Comm] arp blocking
Date: Thu, 8 Dec 2005 09:16:56 +0500
Message-ID: <20051208091656.0e8295a9@hj.acoustics.ru> (raw)
In-Reply-To: <955045690.20051207225554@kuznetsov.org.ua>
On Wed, 7 Dec 2005 22:55:54 -0800
"Alexey S. Kuznetsov" <buster@kuznetsov.org.ua> wrote:
> Привет всем!
> А кто-нибудь знает, как без помощи iptables и подобных утилит
> запретить доступ вообще на сервер с определённого MAC-адреса?
>
В iptables для этого используется критерий --mac-source, при этом в конфигурации ядра должен быть включен параметр CONFIG_IP_NF_MATCH_MARK
hj@hj hj $ zcat /proc/config.gz |grep IP_NF_MATCH_MARK
CONFIG_IP_NF_MATCH_MARK=y
--
ПКБ Акустика
Мерзляков Е.А. icq #115657846
next prev parent reply other threads:[~2005-12-08 4:16 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-12-08 6:55 Alexey S. Kuznetsov
2005-12-08 4:16 ` Мерзляков Евгений Анатольевич [this message]
2005-12-08 15:08 ` Re[2]: " Alexey S. Kuznetsov
2005-12-08 15:10 ` Alexey S. Kuznetsov
2005-12-08 6:11 ` Eugene Prokopiev
2005-12-09 8:23 ` Pavel Shurubura
2005-12-08 6:08 ` Pavel Shurubura
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20051208091656.0e8295a9@hj.acoustics.ru \
--to=hj@acoustics.ru \
--cc=buster@kuznetsov.org.ua \
--cc=community@lists.altlinux.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
ALT Linux Community general discussions
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/community/0 community/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 community community/ http://lore.altlinux.org/community \
mandrake-russian@linuxteam.iplabs.ru community@lists.altlinux.org community@lists.altlinux.ru community@lists.altlinux.com
public-inbox-index community
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.community
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git