From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Gustavo Castro Puig" Subject: SMB auth and Iptables... Date: Thu, 29 Jul 2004 17:51:17 -0300 Sender: netfilter-admin@lists.netfilter.org Message-ID: <001301c475ae$2fc4c340$0200a8c0@marduk> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0009_01C47594.A65340A0" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_0009_01C47594.A65340A0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi, guys: One customer asked me about the possibility of install in an = iptables based firewall some sort of solution (perhaps a proxy) it could = add/delete rules based on users login into a SMB(Samba/NT) server. He = want to grant or deny access to Internet (TCP/IP) based on authenticated = users, not the IP or MAC. It's not a bad idea, but I don't know if it = even exists... I've googled and found nothing about this kind of = solution. Anyway, I told him I could check it out, and... here I am. :-) Do you have any idea about a solution like this using iptables and = "something" else?=20 Any info will be highly appreciated. Thanks! Cheers, Gustavo. ------=_NextPart_000_0009_01C47594.A65340A0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hi, guys:

One customer = asked me about=20 the possibility of install in an iptables based firewall some sort=20 of solution (perhaps a proxy) it could add/delete rules based on = users=20 login into a SMB(Samba/NT) server. He want to grant or deny access = to=20 Internet (TCP/IP) based on authenticated users, not the IP or MAC. = It's not=20 a bad idea, but I don't know if it even exists... I've googled = and=20 found nothing about this kind of solution. Anyway, I told him = I could check it=20 out, and... here I am. :-)

Do you have = any idea=20 about a solution like this using iptables and "something" else?=20

Any info will be = highly=20 appreciated.

Thanks!

Cheers,

=20 Gustavo.

------=_NextPart_000_0009_01C47594.A65340A0--