Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) Limiting Users



 Agreed, Assign them something out of the 10 or 192 block and 
that should do exactley what you are looking or, Call me cray but I
wouldn't reccomendd implementing filters directly on the max it i wouldn't
wast the CPU on them.

Jason Nealis


On Mon, 18 Aug 1997, John Coy wrote:

> Yes, it *will* work.  We do the same thing on our network
> for our Netscape registration server.  We have a username
> that gets assigned a non-routable IP address and he can
> access all resources on our LAN but not go out on the Internet.
> 
> The original post said nothing about a Proxy server in their
> configuration.  He simply wanted to set up a user which can
> access mail but not surf the net.
> 
> On Tue, 19 Aug 1997, Gary Stern wrote:
> 
> > On Mon, 18 Aug 1997 13:54:58 -0500, John Coy wrote:
> > 
> > >Assign them an IP address that is non-routable such as
> > >a 192.168.0.0 address.  They will be able to access all
> > >devices on your LAN but not go out on the net.
> > >
> > >At 07:53 AM 8/18/97 -0400, you wrote:
> > >>Is there a way in RADIUS to allow a user to dialup via modem, make a PPP
> > >>connection, but not be allowed out to surf the Web.  I want to give users
> > >>extra email boxes for their family, but I want them to only be able to
> > >>check email.  The problem is, that I do not want to force them to use
> > >>Pine, Elm, or something like that, I want to allow them to use PPP and
> > >>Eudora if they desire, but do not want to allow them to get to the
> > >>Internet outside my network since it is supposed to be just a email
> > >>account?
> > 
> > No, it wont work. using non routable addresses if you have a proxy
> > server (especially it you haven't configured its access.
> > 
> > OK,
> > 
> > Now the easiest way is to set up a DATA filter for the users
> > connection only allowing access to the ports required..
> > 
> > Lets see now ports 25, 110, maybe dns...anymore ?
> > 
> > Gary.
> > 
> 
> ++ Ascend Users Mailing List ++
> To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd:	<http://www.nealis.net/ascend/faq>
> 

++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>
References: