Hello,<br><br>thanx a lot - I will try.<br><br>To limit the DHCPD in general is no option because this would limit the power of the server. <br><br>thanx a lot,<br>cheers,<br><br><div class="gmail_quote">2011/2/7 Simon Hobson <span dir="ltr"><<a href="mailto:dhcp1@thehobsons.co.uk">dhcp1@thehobsons.co.uk</a>></span><br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div class="im">Alex Bligh wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
Is there a possibility in iptables to read the dhcp-header for the mac<br>
address and put THIS mac-address in the rule for traffic limitation?<br>
</blockquote>
<br>
Theoretically. See (e.g.) the iptables "u32" option which can examine<br>
arbitrary 32 bits words within the packets.<br>
<br>
You might, however, find it easier to patch dchpd to do a token leaky<br>
bucket rate limit.<br>
</blockquote>
<br></div>
Shouldn't be too hard to match, it's in a fixed place - I think it starts at byte 28 in the packet and is 16 bytes long.<br><font color="#888888">
<br>
-- <br>
Simon Hobson<br>
<br>
Visit <a href="http://www.magpiesnestpublishing.co.uk/" target="_blank">http://www.magpiesnestpublishing.co.uk/</a> for books by acclaimed<br>
author Gladys Hobson. Novels - poetry - short stories - ideal as<br>
Christmas stocking fillers. Some available as e-books.</font><div><div></div><div class="h5"><br>
_______________________________________________<br>
dhcp-users mailing list<br>
<a href="mailto:dhcp-users@lists.isc.org" target="_blank">dhcp-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/dhcp-users" target="_blank">https://lists.isc.org/mailman/listinfo/dhcp-users</a><br>
</div></div></blockquote></div><br>