Re: Iptables as auth ?

["Rio Martin." <rio@martin.mu>]

On Tuesday 15 July 2003 20:58, Ramin Dousti wrote:
> On Tue, Jul 15, 2003 at 05:38:53PM +0700, Rio Martin. wrote:
> What is the exact packet flow (for both the initial flow and the RADIUS
> packet exchange) that you were expacting? How does an application which is
> only smart enough for its own protocol integrate the RADIUS auth? Or how
> can you trigger a RADIUS auth from the firewall to the actual user/client
> that is generating the traffic?
> What you want is only to accomplish by installing client software on all
> the client machines... which is not a part of netfilter framework.
> Ramin

okay i describe again what i want:
                        
INTERNET ----> Linux NAT Gateway + RADIUS ----> PC Client 1, 2, 3.. 100

Users in PC Client 1 .. 100 must authenticate with RADIUS before its traffic 
goes to Internet. I dont know how its going to work, but what i have in my 
mind for now is RADIUS must cooperate with somekind of daemon that should 
execute iptables to perform NAT to client IP.

Regards,
Rio Martin.



-- 
There is a great discovery still to be made in Literature: that of
paying literary men by the quantity they do NOT write.