Results 1 to 4 of 4

Thread: MAC address filter rule?

  1. #1
    deus_deceptor Guest

    Cool MAC address filter rule?

    Hi all, I hope some of you can help me out with this configuration.

    Is there any way to allow traffic from a certain MAC address?
    I have a little network of computers that all are behind the same switch (no NAT).
    All of them have dynamic public ip-addresses.

    The net consist of 2 computers and 1 playstation 3.
    On the two computers I've added an ip alias 192.168.0.0/24 addresses and the 192.168.0.0/24 net is added in the trusted zone.

    Unfortunatly I can't add a ip alias on the playstation 3 so and since the ip is dynamic I can't add it directly to the trusted zone.
    Is there a way to add MAC address to the trusted zone.
    I want to be able to stream media to the playstation 3 using UPnP and but I don't want to broadcast to all my neighbours.

    My idea was to have only the local ip alias net and the MAC address of my PS3 to grant access to port used by the UPnP streaming program.

    Anyone that knows how to?

    // Alex

    Operating System:Windows XP Pro
    Software Version:7.0
    Product Name:ZoneAlarm Pro

  2. #2
    Join Date
    Dec 2005
    Posts
    9,057

    Default Re: MAC address filter rule?

    <blockquote><hr>deus_deceptor wrote:
    Hi all, I hope some of you can help me out with this configuration.

    Is there any way to allow traffic from a certain MAC address?
    I have a little network of computers that all are behind the same switch (no NAT).
    All of them have dynamic public ip-addresses.

    The net consist of 2 computers and 1 playstation 3.
    On the two computers I've added an ip alias 192.168.0.0/24 addresses and the 192.168.0.0/24 net is added in the trusted zone.

    Unfortunatly I can't add a ip alias on the playstation 3 so and since the ip is dynamic I can't add it directly to the trusted zone.
    Is there a way to add MAC address to the trusted zone.
    I want to be able to stream media to the playstation 3 using UPnP and but I don't want to broadcast to all my neighbours.

    My idea was to have only the local ip alias net and the MAC address of my PS3 to grant access to port used by the UPnP streaming program.

    Anyone that knows how to?

    // Alex

    Operating System:
    Windows XP Pro
    Software Version:
    7.0
    Product Name:
    ZoneAlarm Pro

    <hr></blockquote>
    Open the ZA | Firewall | Expert and click the Add button.

    Rank: 1
    Name: Playstation (or whatever)
    Comments: (whatever)
    State: Enabled
    Action: Allowed
    Track: Log (see what is happening after) or Log and Alert (see what happened after and see what is happening at the moment)

    Source: My Computer (find in the Modify)
    again source, but select Gateway, enter the IP assigned and the MAC and give a Description (whatever)

    Destination: Repeat the same as for Source.

    Note: Do not copy and paste the MAC in the ZA "Add Gateway" window , please enter manually!

    *this is assuming the playstation IP is static, but perhaps the assigned IP can be locked in?*

    Then do the Protocol. This could be tricky. Besides the UPnP does this use http? I suppose you are trying 1900, 2689 and 5000 TCP/UDP for the UPnP and the SSDP.

    *I hope what you are attempting works for you*

    Either way, each protcol will need both the destination port repeated again in a seperate protocol as the source to create a server. I would leave the source as a range of 1-5000, to be on the safe side.
    The logging should definitely be used and the logs then can be read later to see if there was something missing or if the ports can be refined/added in the Protocol.

    Oldsod.

    Message Edited by Oldsod on 03-09-2008 07:54 AM
    Best regards.
    oldsod

  3. #3
    grauix Guest

    Default Re: MAC address filter rule?

    Hi,
    I have a similar problem. But in my case the IP-adress is dynamic adress from dyndns. How can I solve this issue?

  4. #4
    Join Date
    Dec 2002
    Location
    Mikado Michigan
    Posts
    2,596

    Default Re: MAC address filter rule?

    unfortunately you can't. ZA doesn't do dynamic DNS lookups. It can do it once when adding the IP address, and that is all.
    My homes are SpywareHammer.com and DonHoover.net and BleepingComputer.com


    Consumer Security - 2011 & 2012

    Tilting at windmills hurts you more than the windmills.
    -From the Notebooks of Lazarus Long
    Senior of the Howard Families

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. MAC address trust rule
    By dragonmaster in forum ZoneAlarm Configuration
    Replies: 0
    Last Post: October 11th, 2008, 05:49 PM
  2. Expert Rule not Working - Block IP address.
    By zeud in forum ZoneAlarm Configuration
    Replies: 2
    Last Post: January 7th, 2008, 04:14 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •