[prev in list] [next in list] [prev in thread] [next in thread] 

List:       linux-router
Subject:    Re: [LRP] Authentication of users on eth1
From:       <joe () upnet ! dhs ! org>
Date:       2001-06-30 18:58:10
[Download RAW message or body]

Hi Priyan:

I don't know if I can answer all your Questions..I..will try...

1. you can block computer on eth1 by their IP address...(not by username)
 using IPCHAINS rules...

2. if you can't do that, you can setup a PROXY Server then you can
    DENY or ALLOW by username or Ip-address..

Now how this is going to work, I did something while ago...please read:
http://upnet.2y.net/lrp_download/lrp_setup/readme.txt

Good Luck..

Upnet Joe ( Upali Joseph Weerasinghe )

On Fri, 29 Jun 2001, Priyan Gunatilake wrote:

> Hi,
>
> Here's a question I'd like to throw up in the air...
>
> I am using EigerSteinBeta2 where eth0 is connected to
> a cable modem and eth1 to a hub that also connects a
> network of computers.  Currently, a computer on eth1
> gets through to the internet via eth0 and the cable
> modem.
>
> The question is ... I want to only allow certain users
> (on eth1) to be able to get onto the internet.
> Ideally, a user will have to authenticate
> himself/herself and only those that have permission
> should be able to get through to the cable modem via
> eth0.
>
> One way to go about it is (based on my understanding
> of portslave and LRP)  ...to perform an operation
> similar to portslave but without the dialin(can have
> radius authentication). Can portslave be hacked to
> remove the dialin operations so that a user on a
> computer on eth1
> 1. provides username and password to a portslave like
> process on the LRP
> 2. portslave like process communicates with the radius
> server
> 3. If authenticated, the user is allowed to go through
> to eth0.
>
> Is there any other way to authenticate a user on eth1
> and allow/disallow him/her access to eth0?
>
> Thanks in advance
>
> --priyan
>
>
>
> __________________________________________________
> Do You Yahoo!?
> Get personalized email addresses from Yahoo! Mail
> http://personal.mail.yahoo.com/
>
> _______________________________________________
> linux-router maillist  -  linux-router@linuxrouter.org
> http://www.linuxrouter.org/mailman/listinfo/linux-router
>


_______________________________________________
linux-router maillist  -  linux-router@linuxrouter.org
http://www.linuxrouter.org/mailman/listinfo/linux-router

[prev in list] [next in list] [prev in thread] [next in thread]