Re: Block/Accept by MAC Address

[Anders Fugmann <afu@fugmann.dhs.org>]

Jim Gifford wrote:
> Is it possible to block or accept information from specific MAC Addresses.
> 
> Here is what I would like to do. Is to create a exempt and complete block
> policy by mac address. I have a guy who keeps hacking my machine and his IP
> address is always changing and so does his hostname. The only thing that was
> common was his MAC address.
> 
> Thank you in advance for your help.
> 
> 
If this person is hacking you from the internet, you cannot use the mac 
address for filtering. The MAC addres on a packet is changed each time 
the packet packet traverses through a router, and this you will always 
see the same mac address on packets comming through your ISP.

If he is hacking you from withing you lan, I suggest cutting his wire.
(Alternativly use: iptables -t mangle -T PREROUTING -m mac --mac-source 
XX:XX:XX:XX:XX:XX -j DROP)

Regards
Anders Fugmann
-- 
Neo: 'Can you fly that thing?'
Trinity: 'Not yet'.
$ apt-get install pilot-prg-v212helicopter.