Re: netfilter access control

[Frank Schaefer <frank.schafer@setuza.cz>]

On Thu, 2002-06-06 at 10:06, Thierry ITTY wrote:
> Hello
> 
> I'm currently using squid with an ncsa_auth module so that any employee who
> wants to surf the 'net has to identify himself as a person, no matter which
> machine he's on. Doing so only http,https,http/ftp protocols are supported.
> 
> Now I need to open wider access with irc, realvideo, and other that very
> important things ;-) and of course I think of netfilter/iptables, which I'm
> used to by the way.
> 
> So I'd appreciate any advice which would help me setting up some kind of
> signature system (preferably with a browser) allowing a given user (not a
> machine) to go out (I don't need protocol specific permissions) for the
> time of a session...

Hi Thierry,

we solved this task using mod_auth. There wasn't any problem for UNIX
clients/ users. Doing some Gooooooooooogle we found a Windooooooze
identd too.

Adding ``acl allowed_users ident allowed_users_file'' to our squid.conf
did it.

Hope this helps
Frank