--- On Wed, 3/10/10, Robert Nichols <rnicholsNOSPAM@xxxxxxxxxxx> wrote:
:-
> >
> > iptables ..... -m bootp --mac-source
> 00:08:a1:ab:75:d1 -j DROP ?
> >
> > Well, if 'iptables' can't serve the purpose, how about
> ebtables ?
>
> Wouldn't it be a lot easier to adjust the DHCP server's
> configuration by
> adding a "deny" statement in the pool's permit list?
>
True but manually editing the configuration file will require the dhcp server to be restarted, whereas 'iptables' and/or 'ebtables' can be scripted at runtime.
Cheers.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
