Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Firewall / aliases - resolve mac addresses #4248

Closed
AdSchellevis opened this issue Aug 9, 2020 · 1 comment
Closed

Firewall / aliases - resolve mac addresses #4248

AdSchellevis opened this issue Aug 9, 2020 · 1 comment
Assignees
@AdSchellevis
Labels
feature Adding new functionality
Milestone
21.1

Comments

@AdSchellevis
Copy link
Member

The question to be able to filter on mac addresses is asked from time to time, since pf(4) doesn't support this type of functionality the idea is to resolve mac addresses in a similar way as we would when using hostnames. Periodically query arp+ndp to find which addresses are currently attached to a mac address.

fc38dfa added the backend code, our model still needs minor modifications to support this.

Although this is still an experiment and needs documentation to be actually included in our product, it could help to set policies for physical addresses or ranges of addresses (like vendors).
@AdSchellevis AdSchellevis added the feature Adding new functionality label Aug 9, 2020
@AdSchellevis AdSchellevis self-assigned this Aug 9, 2020
AdSchellevis added a commit that referenced this issue Aug 9, 2020
@AdSchellevis
Firewall / aliases - allow mac addresses for #4248
c2c424a
@fichtner fichtner added this to the 21.1 milestone Aug 9, 2020
AdSchellevis added a commit that referenced this issue Aug 10, 2020
@AdSchellevis
Firewall / aliases. resolve mac addresses at fixed ttl for #4248
8fdb97a
@AdSchellevis
Copy link
Member Author

to try on 20.7.1:

opnsense-patch fc38dfa c2c424a 8fdb97a

fichtner pushed a commit that referenced this issue Aug 31, 2020
@AdSchellevis @fichtner
Firewall / aliases - allow MAC addresses
33e4359 
PR: #4248

(cherry picked from commit fc38dfa)
(cherry picked from commit c2c424a)
(cherry picked from commit 8fdb97a)
@AdSchellevis AdSchellevis mentioned this issue Apr 15, 2021
Closed
oshogbo pushed a commit to DynFi/opnsense-core that referenced this issue Mar 3, 2022
@AdSchellevis
Firewall / aliases - allow mac addresses for opnsense/core#4248
09ddb87
oshogbo pushed a commit to DynFi/opnsense-core that referenced this issue Mar 3, 2022
@AdSchellevis
Firewall / aliases. resolve mac addresses at fixed ttl for opnsense/c…
1880461 
…ore#4248
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@AdSchellevis AdSchellevis

Labels
feature Adding new functionality
Milestone
21.1
Development

No branches or pull requests
2 participants
@fichtner @AdSchellevis