[FUG-BR] Filtrando MAC com o pf

[Douglas Santos]

> -------- Original Message --------
> Subject: [FUG-BR] Filtrando MAC com o pf
> From: "m3 BSD" <m3.bsd.mania at gmail.com>
> Date: Sat, September 09, 2006 1:55 pm
> To: "Lista_Brasileira_de_Discussão_sobre_FreeBSD_(FUG-BR)"
> <freebsd at fug.com.br>
> 
> Bem, retirado das docs do OpenBSD packet filter:
> http://www.openbsd.org/faq/pf/tagging.html

Ja existe documentacao em portugues:
http://www.openbsd.org/faq/pf/pt/tagging.html

> Segue treicho abaixo:
> Tagging Ethernet Frames
> Tagging can be performed at the Ethernet level if the machine doing
> the tagging/filtering is also acting as a bridge(4). By creating
> bridge(4) filter rules that use the tag keyword, PF can be made to
> filter based on the source/destination MAC address. Bridge(4) rules
> are created using the brconfig(8) command. Example:
> 
>     # brconfig bridge0 rule pass in on fxp0 src 0:de:ad:be:ef:0 \
>        tag USER1
> 
> And then in pf.conf:
> 
>     pass in on fxp0 tagged USER1

Vale lembrar que o pf nao faz filtro por mac, quem captura os end. mac e'
o brconfig e voce _precisa_ ter uma bridge configurada, o que nao se ve na
maioria dos casos.