Comments (6)
Perhaps the current mac-address-filter plugin would work for you ?
Basically create a MAC_ADDRESS_FILE specified white-list file of MAC addresses.
from aif.
Hi abelbeck, no I'm already doing the mac-address filtering using the plugin method you describe, but it doesn't block dhcp requests, which are at a lower network layer.
from aif.
DHCP uses UDP, not a lower network layer, but it does use a 255.255.255.255 broadcast address. It looks like your client's DHCPDISCOVER is allowed regardless of MAC address in the mac-address-filter plugin (by design) with the rule:
ip4tables -A MAC_FILTER -d 255.255.255.255 -j RETURN
You could try commenting out that rule in plugins/10mac-address-filter.plugin
and see if that gives the behavior you want.
from aif.
There isn't a plugins/10mac-address-filter.plugin file in the plugins directory?
from aif.
Look for /usr/share/arno-iptables-firewall/plugins/10mac-address-filter.plugin
or similar.
from aif.
I think this can be closed, if not please reopen.
from aif.
Related Issues (20)
- Opening ports on specific IP HOT 1
- Country blocking HOT 2
- ipv6nd_sendadvertisement not permitted HOT 2
- ipv6 NAT support? HOT 5
- FTP - can't retrieve directory HOT 8
- Any way to prevent all logging? HOT 5
- Error: either "to" is duplicate, or "equalize" is garbage HOT 5
- Plugin loopback_nat not loading properly? HOT 1
- Missing support for docker HOT 3
- support for AnyIP? HOT 1
- No iptables/ip6tables found at Debian 10 (2021/03/26) HOT 8
- IPSET/NETSET support in HOST_OPEN_TCP HOT 2
- aif 2.03 doesn't start on debian buster HOT 5
- Ubuntu 22.04 with libvirtd, the bridge interface 'virbr0' does not start automatically HOT 3
- AIF falling back to conntrack legacy automatic helper in Debian with kernel 6.0 and higher HOT 5
- nftables as aif backend HOT 1
- Disable "Dropped INPUT packet" logging? HOT 5
- AIF blocking nimble HOT 2
- Pings on the internal network to the firewall server are being blocked. HOT 5
- # Warning: iptables-legacy tables present, use iptables-legacy-save to see them HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from aif.