[CentOS] Block internet access for some users on the LAN ?

[John R Pierce]

On 9/19/2017 8:39 AM, m.roth at 5-cent.us wrote:
> As a response to someone else's cmts, the set of kids who knows how
> they're being blocked is a small subset of all kids, and those who know
> that a MAC address can be forged is a small subset of the previous. And
> *then*  they'd have to find out a valid MAC address.

all it takes is one kid, who then shares his 'trick' with other kids, 
and blam.
>
> On top of that, it would seem to me that the ones for whom you have a
> registered MAC address is either hardwired, and so on, permanently, or the
> teachers and staff are in before the students, mostly, and so when a
> student tries to spoof the MAC, they get refused, since the real system
> already has the IP address.

that presumes all the reserved systems are on 24/7.


-- 
john r pierce, recycling bits in santa cruz