PATCH: wired eapol receive/send
Wed Sep 8 10:24:45 PDT 2004
> Ebtables is a good way to do this - it already has everything you need
> in the kernel. Set it up to pass frames to userspace by default, and as
> you see new MAC addresses add a new rule to not pass that frame up.
Sounds like a good idea. Now you have to write QUEUE target for
ebtables and a api for ebtables. There is no api for iptables too.
Adding/Deleting rules by exec could be very slow.
Why no generic ieee802.1x module?
More information about the Hostap