Question for mac adress filtering.
 

I have network of 150-200pc, they are set with static ip. Now i use ip-sentinel for mac filtering, but i'm dissatisfied from it. So, can i use arp table for mac filtering, or it's only for dhcp?

DHCP hands out IP address from a given range (ie dynamic IPs). This is -in principle- not related to MAC physical addressing.
DHCP can help share some networking configurations on the network.
Would you prefer centralized MAC filtering (ie on central gateway)? Or de-central (on each machine)?

i think ebtables will help for layer 2 level filtering

dhcpd is stoped, i use only static ip.

timmeke what do you mean?

kirukan is eptables is like ip-sentinel or it's more powerful?

Can i use something like this:
create file ip-mac.conf in /etc with:

1.2.3.4 aa:bb:cc:dd:ee:ff
1.2.3.5 aa:bb:cc:dd:ff:ff

then:

arp -f /etc/ip-mac.conf

I thought it was for finding out phoney IP address's not mac filtering.