block site by mac address

[Telmo Pinto]

Hello 

Someone already made ​​website blocking by mac address?

exemple:

block certain mac address to access https sites

I need help .....how to do?

[Filippo Carletti]

I use dhcp to assign static ip to mac address and then block using ip address.
However I read:
http://wiki.squid-cache.org/SquidFaq/SquidAcl#Can_I_set_up_ACL.27s_based_on_MAC_address_rather_than_IP.3F

It seems possible to use mac directly with a template-custom.
Let me know if you need help setting it up.

> --
> You received this message because you are subscribed to the Google Groups
> "NethServer" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to nethserver+...@googlegroups.com.
> To post to this group, send email to neths...@googlegroups.com.
> To view this discussion on the web, visit
> https://groups.google.com/d/msgid/nethserver/9de6a90f-7baf-4b3a-ba56-a3ed4fae445b%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.



--
Ciao,
Filippo

[Filippo Carletti]

Telmo, sorry for the late reply, but FOSDEM and work backlog kept me
away from the pc. :-)

You'll need to write blocked mac addresses to a file:
/etc/e-smith/templates-custom/etc/squid/squid.conf/20acl_95mac
using the following syntax:
acl computer1 arp 01:02:03:04:05:06
acl computer2 arp 01:02:03:04:05:06

substituting computerX with a name that let you understand who is
blocked and mac address.

Then add /etc/e-smith/templates/etc/squid/squid.conf/30http_access_05_deny_mac
containing:

http_access deny computer1
http_access deny computer2

Expand template to re-create squid.conf:
expand-template /etc/squid/squid.conf

Restart squid:
service squid restart

--
Ciao,
Filippo

[Alessio Fattorini]

On 29/01/2015 01:14, Telmo Pinto wrote:
> Hello
>
> Someone already made ​​website blocking by mac address?

Hi Telmo,
sorry for the delay but I can't see your images, can you attach them at
your email?


--
Alessio Fattorini
Nethesis srl - Pesaro (Italy)