Re: bridge(4) and pf tagging

[Gergo Szakal <bastyaelvtars@xxxxxxxxx>]

On Mon, 6 Aug 2007 09:57:18 +0800
"Sepherosa Ziehau" <sepherosa@gmail.com> wrote:

> What's the difference between this and putting a filter rule in pf
> configure file?

PF cannot filter MAC addresses. You have to tag packets with the target
MACs using brconfig and handle these tagged packets with pf. This
requires a bridge connection to be created because these tags live only
inside the partcular bridge structure (or wtf :-P).

MAC filtering is a frequently rejected request on the openbsd-pf
lists. :-)

-- 
Gergo Szakal MD <bastyaelvtars@gmail.com>
University Of Szeged, HU
Faculty Of General Medicine

/* Please do not CC me with replies, thank you. */