Now your servers should be able to only assign IP addresses from /etc/nf. $EBTABLES -A FORWARD -i eth0 -o eth1 -j DROP $EBTABLES -A FORWARD -i eth1 -o eth0 -j DROP $EBTABLES -A FORWARD -p ARP -i eth0 -o eth1 -arp-opcode ! 2 -j ACCEPT $EBTABLES -A FORWARD -p ARP -i eth1 -o eth0 -arp-opcode ! 2 -j ACCEPT $EBTABLES -A FORWARD -p ARP -i eth0 -o eth1 -arp-opcode 2 -arp-ip-dst $ip -arp-mac-dst $mac -j ACCEPT $EBTABLES -A FORWARD -p ARP -i eth1 -o eth0 -arp-opcode 2 -arp-ip-src $ip -arp-mac-src $mac -j ACCEPT $EBTABLES -A FORWARD -p IPv4 -i eth0 -o eth1 -d $mac -ip-dst $ip -j ACCEPT $EBTABLES -A FORWARD -p IPv4 -i eth1 -o eth0 -s $mac -ip-src $ip -j ACCEPT Here is the script that implement this rules for me, remember in my setup servers are on eth1 and their gateway is on eth0:Ĭat /etc/nf | while read -r mac ip do You can assign multiple IPs to one mac address with multiple lines with the same mac. Now to limit IP addresses per mac address you will need ebtables /you should enable them in kernel configuration too/, to install it on Gentoo I use:įirst lets create file /etc/nf that will contain mac addresses and IP adresses assigned to it. Now as you connect some computers on eth0 and eth1 they should see each other. You may want to change brname to something more meaningfull: This commands bridge eth0 and eth1 interfaces, DO NOT run them if you’re connected to the box through eth0 or eth1. First we need to bridge eth0 and eth1, you’ll need brctl command, to install it on Gentoo Linux run:

In my setup on eth0 is my gateway and on eth1 is switch with servers connected to it.

User_pref(“ days I’ve implemeted a Linux bridge that does traffic accounting and IP restrictions per mac adress and decided to share my experience. User_pref(“_document_iceservers”, false) User_pref(“”, false) // disable Adobe Primetime and OpenH264 plugins But your setting - complete hereafter - disables completely WebRTC on Firefox whilst uBlockO’s setting “prevents WebRTC from leaking local IP addresses” without disabling WebRTC, as I understand it : WebRTC here totally disabled on Firefox with,

Opera browser allows web addresses