Topics

1

General Discussion / Firewall Rule to Allow Access by MAC Address

« on: April 11, 2016, 08:22:40 pm »

All:

I'm new to OPNsense, so it may be that I just can't find the correct location for this option, but is it possible to filter (block or allow) traffic based on MAC Address?  I'm thinking of a simply rule like: /sbin/iptables -A INPUT -m mac --mac-source 01:00:E6:9A:14:B8 -j DROP.  Any thoughts?

George

2

General Discussion / OpenDNS and Firewall Rule to Block other DNS traffic

« on: April 11, 2016, 08:13:45 pm »

All:  I'm new to Opnsense and so it may be that I'm missing something simple.  I'm trying to follow this guide https://www.kirkg.us/posts/using-opendns-with-opnsense/ to prevent other users (my son) from bypassing OpenDNS.  Specifically, the guide sets a firewall rule that prevents all traffic on port 53 (the DNS port) from computers inside the firewall.  The destination domain to which the rule is applied is called "this firewall".  AFAICT, this was used in pfsense and earlier iterations of OPNsense, but that option is no longer available.  What does appear to be available is an option of "WAN net".  Is "WAN net" the correct destination domain for this rule?

Thanks,

George