filter by MAC address?

Is there any way to configure ipf or pf to reject packets
based on the
source MAC address?  Failing that, is there any way to get
dhclient to
do so?


		--Steve Bellovin, http://www.cs.columbi
a.edu/~smb