MAC or IP to use in FIREWALL ?

[xploita]

to controll access to services in my network,which one is better,to block/allow using ip addresses or mac addresses ...as both can be spoofed easily !

[anomie]

Use IP address (not host name) instead of MAC address. It is very trivial to spoof a MAC address. It is significantly more difficult to spoof an IP address to make a tcp connection.

[anomie]

P.S. Here's a good short article for you:
IP Spoofing: An Introduction

First google hit for "ip spoofing" actually. :P

Remember, security in layers. Harden your services as well.

[thehemi]

Filter using both.