MAC address deny in udhcpd

[Denys Vlasenko]

On Mon, May 14, 2012 at 2:08 AM, Tom Isaacson <Tom.Isaacson at navico.com> wrote:
> In the example udhcpd.conf it shows how to declare a static IP address
> for a specific MAC address:
>
> |   # Static leases map
>   static_lease 00:60:08:11:CE:4E 192.168.0.54
> |
>
> You can also use a MAC address range by using the wildcard:
>
> |   static_lease 00:21:5a:e7:xx:xx 10.10.1.254

No, you can't:

udhcpd: can't parse line 57 in udhcpd.conf


> But it doesn't seem possible to deny an IP address to a MAC address or range, which is possible in dhcpd.conf. I was thinking this could be done in the same way static leases are done:
> ||   static_lease 00:21:5a:e7:xx:xx 0.0.0.0|
> Alternatively we could add a new command:
>   deny|00:21:5a:e7:xx:xx|
>
> What are your thoughts?

You can block incoming packets by MAC using iptables.
This way, all traffic can be ignored, not only DHCP one.

-- 
vda