<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: Andale Mono; font-size: 10pt; color: #000000'>Deep packet inspection could work - the MAC address is in there certainly on DHCPv4.<br><br><div><br></div><hr id="zwchr"><blockquote style="border-left:2px solid rgb(16, 16, 255);margin-left:5px;padding-left:5px;color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>From: </b>"Jeff Waller" <jeffw@cnxntech.com><br><b>To: </b>"Users of ISC DHCP" <dhcp-users@lists.isc.org><br><b>Sent: </b>Wednesday, March 7, 2012 1:36:42 PM<br><b>Subject: </b>Re: does isc dhcp 4.2.3 support blocking client which send many<br><br><div>Would have to be augmented beyond simple requests as illustrated below to also inspect</div><div>the packet for the mac address. May be direct support in iptables and/or the support modules or could</div><div>ultimately call out to an external program (snarf?).</div><div><br></div><div>Another (1 minute this time) google, not sure about applicability (keywords deep packet inspection)</div><div><a href="http://l7-filter.sourceforge.net/HOWTO" target="_blank">http://l7-filter.sourceforge.net/HOWTO</a></div><div><br></div></blockquote></div></body></html>