Also, note that if a router exits between your ssh clientS and your ssh
server then ALL ssh incoming connections from different clients will be
seen with the same source mac addr of the router (of course, each of the
connections will have different src ip (if NO nat is done in the router)).
Jose Maria Lopez wrote:
El sÃb, 11 de 09 de 2004 a las 22:01, active escribiÃ:
On "Sat 11 of September 2004" Darren Kirby wrote:
Are MAC addresses unique for all ethernet cards? What I would like to
know is could I use this rule to allow ssh connections ONLY from my
notebook no matter what its current IP address happens to be, and drop
all other connection requests?
Yes. MAC addresses are set in the card by the manufacturer. This is a
good method to control input traffic.
For more info: http://www.webopedia.com/TERM/M/MAC_address.html
But have in mind that some operating systems let you change the
MAC address of the card. By example, Linux let you do that, and
that can fool some kinds of traffic control.
