From: Eric Leblond <eric@inl.fr>
To: "jgalvez@webpipe.net" <jgalvez@webpipe.net>
Cc: netfilter@lists.netfilter.org
Subject: Re: A secure router, by MAC address
Date: Wed, 20 Oct 2004 22:23:42 +0200 [thread overview]
Message-ID: <1098303822.8628.54.camel@porky> (raw)
In-Reply-To: <1098300513.5684.15.camel@6-allhosts>
[-- Attachment #1: Type: text/plain, Size: 1556 bytes --]
On Wed, 2004-10-20 at 13:28 -0600, jgalvez@webpipe.net wrote:
> Eric,
>
> I looked into NuFW, but it seems more complex that what I need. The
> biggest drawback to it is the requirement for each client to be running
> authentication software.
Well, it seems the new no client mode was really awaited ;-)
NuFW 0.9.5 was released today bringing the possibility to do
authentication without client. The main problem is that for the moment,
only an ident module is provided ... If you only use Linux on your PC,
it can be a solution. If it is not the case, then it will only be a
solution when the work on "microsoft" module will be finished.
BR,
>
> All I really need are a few specific rules, if traffic is coming in on
> this interface from this IP and mac, allow it, otherwise redirect ts
> localhost if destination port is 80.
>
> -Josh
>
> On Wed, 2004-10-20 at 13:12, Eric Leblond wrote:
> > Hi,
> >
> > It really looks like you want to distinguish between well know users and
> > a set of mobile users.
> > NuFW (http://www.nufw.org) is done to distinguish between users because
> > it's an authentication firewall. It authenticates connection in a secure
> > manner, so you're sure of the identity of users that you let go accross
> > your firewall.
> >
> > You can easily manage to build a solution comparable to the one you
> > describe below with NuFW. With more flexibility and more security.
>
> > BR,
>
--
Eric Leblond <eric@regit.org>
NuFW, Now User Filtering Works : http://www.nufw.org
[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]
next prev parent reply other threads:[~2004-10-20 20:23 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-10-20 18:46 A secure router, by MAC address jgalvez
2004-10-20 19:12 ` Eric Leblond
2004-10-20 19:28 ` jgalvez
2004-10-20 20:23 ` Eric Leblond [this message]
2004-10-20 20:39 ` Jason Opperisano
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1098303822.8628.54.camel@porky \
--to=eric@inl.fr \
--cc=jgalvez@webpipe.net \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox