[ndbug] PF filtering by Mac address

[Philip Paeps]

On 2016-12-21 20:12:04 (+0530), Hrishikesh Muruk <hrishim at gmail.com> wrote:
> I have just one machine (VPS) that I want to configure as an email
> server.The accounts on the server will be accessed using a specific set of
> devices (say 10-15). Would it be overkill to set up pf so that only
> requests from these mac addresses will be allowed for sending/retrieving
> mail ?

It would be overkill and it would only work if the 10-15 devices were on
the same Ethernet.  If they are accessing the server over the internet,
you can't even get at their MAC addresses.  That's not how IP works.

Philip

-- 
Philip Paeps
Senior Reality Engineer
Ministry of Information