Subject: Re: filter by MAC address?
To: Steven M. Bellovin <>
From: mouss <>
List: tech-net
Date: 12/10/2006 21:38:09
Steven M. Bellovin wrote:
> Is there any way to configure ipf or pf to reject packets based on the
> source MAC address? 

seems possible with pf:

>  Failing that, is there any way to get dhclient to
> do so?

if you control the dhcp server, you could assign them IPs in a specific 
range and block this range.

I wonder if it's feasible to blackhole such machines by playing with arp?