Solved

Iptables & Squid Rules - Workstations with Dynamic Ip Address

Posted on 2006-10-30
2
355 Views
Last Modified: 2008-03-17
Hi Experts...

One of my networks has a Windows 2003 server thats acts as a DHCP to the local network, and i administer a Linux BOX (Debian) with iptables and Squid. The internet access is restricted based on individual policies acording with the CEO.

My questions:

In Iptables and in Squid is possible to apply rules using only the MAC ADDRESS or the Machine Name ?

Any help will be very apreciate...

Regard´s

Tullio

0
Comment
Question by:tullioc
2 Comments
 
LVL 4

Accepted Solution

by:
NorCal2612 earned 500 total points
ID: 17839686
This is a decent article explaining how to create iptables rules that filter based on MAC addresses:

http://jaredquinn.info/it-related/technical/2006.02.05/iptables-mac-filter/

And here is an example for squid:

(1) To allow http_access for only one machine with MAC Address 00:08:c7:9f:34:41

To use MAC address in ACL rules. Configure with option -enable-arp-acl.

acl all src 0.0.0.0/0.0.0.0
acl pl800_arp arp 00:08:c7:9f:34:41
http_access allow pl800_arp
http_access deny all

Hope this helps.
0
 

Author Comment

by:tullioc
ID: 17915681
NorCal2612

Perfect, thanks a lot....
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

​Being a Managed Services Provider (MSP) has presented you  with challenges in the past— and by meeting those challenges you’ve reaped the rewards of success.  In 2014, challenges and rewards remain; but as the Internet and business environment evol…
Hello EE, Today we will learn how to send all your network traffic through Tor which is useful to get around censorship and being tracked all together to a certain degree. This article assumes you will be using Linux, have a minimal knowledge of …
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now