firehol-mac(5)
π firehol-mac β bestie edition β¨
okay so this is the firehol-mac(5) page from the FireHOL manual, version 3.1.8, and it's literally just one tiny command that does one very specific, very iconic job π
β¨ NAME β¨
firehol-mac β make sure the source IP and the source MAC address actually match, no cap π«Ά
πΈ SYNOPSIS πΈ
mac IP macaddr
π DESCRIPTION π
so here's the vibe: any mac command you write is gonna affect all the traffic headed for the firewall host itself, or traffic that's gonna be forwarded by the host. all of it. the whole thing. π
and the placement matters, bestie β you gotta declare these before the first router or interface. don't be out here putting them after, that's not the move π
π Note: there's ALSO amacparameter that lets you match MAC addresses inside individual rules β go peek atfirehol-params(5)for that one, it's a whole different girl π
The mac helper command DROPs traffic coming from that IP address if it wasn't sent using the macaddr you specified. like, sorry babe, wrong MAC, we're not doing this today π
When packets get dropped, a log pops out with the label βMAC MISSMATCHβ β yes, that's spelled like that, (sic.), the original really said that and we're respecting it fr fr π
And mac plays by the default log limits, so check out the [LOGGING] section in firehol-params(5) if you wanna know the rules of the game.
π Note: this command pins one IP to one particular MAC address. BUT β and this is important β the same MAC address is still allowed to send traffic using a different IP. it's one-way restriction energy, not a full lockdown, iykyk π
π¦ EXAMPLES π¦
mac 192.0.2.1 00:01:01:00:00:e6
mac 198.51.100.1 00:01:01:02:aa:e8
β SEE ALSO β
firehol(1)β the FireHOL program itself πfirehol.conf(5)β your FireHOL configuration πfirehol-params(5)β the optional rule parameters πΈ- FireHOL Website π
- FireHOL Online PDF Manual π
- FireHOL Online Documentation π
π AUTHORS π
FireHOL Team. (shoutout to the squad, they ate and left no crumbs π«Ά)
and that's the whole page, bestie!! this was built by the FireHOL Reference on 13 Apr 2025 (that's the FireHOL 3.1.8 era, for the record), so if you're reading this later just know the lore is from that moment in time β¨ mwah, go forth and match those MACs π π
π¦ where this page comes from
- debian trixie: firehol-doc 3.1.8+ds-1 Β· GPL-2.0-or-later
- ubuntu resolute: firehol-doc 3.1.8+ds-1 Β· GPL-2.0-or-later
- ubuntu stonking: firehol-doc 3.1.8+ds-1 Β· GPL-2.0-or-later
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms