allow access for only the listed mac adresses

Allow Access For Only The Listed Adresses Free To Share

Both these methods have a drawback though, it is that if the user has admin rights on his computer he can assign the computer another static ip and bypass the blocked ip.

Although MAC addresses can be spoofed, it is somewhat harder than simply assigning another ip Is this possible with pfsense or is there an additional package.

This implies to me that youd have to manually list every client you wanted to allow, rather than just the MAC addresses of those you wanted to deny.

They will be used by tech savy persons, so I do expect some fiddling and static ip changes to the machines.

I would like to use DHCP Reservations with static arp tables, but I need to have the convenience of the DHCP server to allow new wireless clients to come and go.

FreeBSD does have MAC filtering in the wireless stack, but for the reason above it is not implemented in the pfSense GUI and that would only help if the firewall was acting as the AP.

IPFW, used by the captive portal, can block by MAC, so there might be some way to enable CP and block MACs via a command-line hack, but you wouldnt be able to schedule it.

As for arp spoofing Im not working with people that technical.

If there are any other thoughts or ideas please feel free to share Im all about the learning.

We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

See our newsletter archive to sign up for future newsletters and to read past announcements.

Allow Access For Only The Listed Adresses Free To Share

Allow Access For Only The Listed Mac Adresses