Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: (ASCEND) Limiting Users
Yes, it *will* work. We do the same thing on our network
for our Netscape registration server. We have a username
that gets assigned a non-routable IP address and he can
access all resources on our LAN but not go out on the Internet.
The original post said nothing about a Proxy server in their
configuration. He simply wanted to set up a user which can
access mail but not surf the net.
On Tue, 19 Aug 1997, Gary Stern wrote:
> On Mon, 18 Aug 1997 13:54:58 -0500, John Coy wrote:
>
> >Assign them an IP address that is non-routable such as
> >a 192.168.0.0 address. They will be able to access all
> >devices on your LAN but not go out on the net.
> >
> >At 07:53 AM 8/18/97 -0400, you wrote:
> >>Is there a way in RADIUS to allow a user to dialup via modem, make a PPP
> >>connection, but not be allowed out to surf the Web. I want to give users
> >>extra email boxes for their family, but I want them to only be able to
> >>check email. The problem is, that I do not want to force them to use
> >>Pine, Elm, or something like that, I want to allow them to use PPP and
> >>Eudora if they desire, but do not want to allow them to get to the
> >>Internet outside my network since it is supposed to be just a email
> >>account?
>
> No, it wont work. using non routable addresses if you have a proxy
> server (especially it you haven't configured its access.
>
> OK,
>
> Now the easiest way is to set up a DATA filter for the users
> connection only allowing access to the ports required..
>
> Lets see now ports 25, 110, maybe dns...anymore ?
>
> Gary.
>
++ Ascend Users Mailing List ++
To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd: <http://www.nealis.net/ascend/faq>
Follow-Ups: