Re: Filtering by Mac Address

[Jon Wilson <lists@erentil.net>]

Cupertino Miranda wrote:
> Hello everyone,
> 
> For one of my current hackings I need to construct the following network 
> rules.
> 
> I need to disable internet access to all the local network hosts by 
> redirecting them the my webserver (allowing to show some web page in 
> case of http connection).
> Enable internet access by mac address to some of this hosts.
> 
> I have currently general NAT rules in gateway machine.
> 
> Can someone provide me some details how can I do it.
> 
> Thanks a lot
> -
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> 
this is the shell script I wrote for wireless user authentication.

uses prerouting default drop policy to limit to dns and redirect 
http/https traffic.  apache instance redirects everything coming in to 
auth page, can run the shell script

firewall.sh add 00:01:02:03:04:05

to add the mac to allowed range.

should give you what you need.

http://erentil.net/wiki/iptables/auth/

-- 
Jon Wilson