From mboxrd@z Thu Jan 1 00:00:00 1970 From: Sp0oKeR Subject: Re: Allowing access only some sites - onely some mac address Date: Mon, 29 Aug 2005 17:07:08 -0300 Message-ID: <9255886c050829130749294067@mail.gmail.com> References: <006801c5acd1$b2ce1600$0301010a@pivt> <9255886c05082912495b3eff85@mail.gmail.com> Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: In-Reply-To: Content-Disposition: inline List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="iso-8859-1" To: Damon Gray Cc: netfilter@lists.netfilter.org You are right! My bad. Thanks, Sp0oKeR On 8/29/05, Damon Gray wrote: >=20 > Just wanted to point to what I think was the intended website: >=20 > http://ipset.netfilter.org >=20 >=20 > On Mon, 29 Aug 2005, Sp0oKeR wrote: >=20 > > I think ipset is a good idea. > > > > # ipmap > > The ipmap set type uses a memory range, where each bit represents one > > IP address and can store up to 65535 (B-class network) entries. You > > can store same size network addresses in an ipset as well and an IP > > address will be in the set if the network address it belongs to can be > > found in the set. > > # macipmap > > The macipmap set type uses a memory range, where each 8 bytes > > represents one IP and a MAC addresses. A macipmap set type can store > > up to 65535 (B-class network) IP addresses with MAC. > > > > Look http://ipsec.netfilter.org > > > > Att, > > > > Sp0oKeR > > > > On 8/29/05, Sebasti=E3o Ant=F4nio Campos (GWA) wrote: > >> Dears, > >> > >> I'd like to allow access only to some sites by some mac address. > >> > >> For example: > >> > >> I have a list of the mac address 00:0c:6E:11:E8:B0, 00:D8:02:D8:C8:DF, > >> 00:E7:05:C9:07:EA............ and and I'd like that only these mac add= ress > >> could access only the following IP: 200.221.2.128, 200.221.2.129, > >> 200.221.2.130, 200.221.2.131, 200.205.144.75, 200.205.144.76. But the = other > >> mac address could access everything. > >> > >> How is the better way to do this?? > >> > >> Thks > >> > >> > >> > >> > > > > > > >