Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: (ASCEND) Limiting Users
From: root <root@ns1.ntrnet.net>
>Is there a way in RADIUS to allow a user to dialup via modem, make a PPP
>connection, but not be allowed out to surf the Web. I want to give users
>extra email boxes for their family, but I want them to only be able to
>check email. The problem is, that I do not want to force them to use
>Pine, Elm, or something like that, I want to allow them to use PPP and
>Eudora if they desire, but do not want to allow them to get to the
>Internet outside my network since it is supposed to be just a email
>account?
I'm set up with 2 groups, 'dialup' and 'inet'. Members of the dialup group
have full access to our network services while the members of inet can do
everything but connect through our term servers. I have hacked radiusd to
deny access based on the user's gid -- was a fairly simple hack.
When we sell an email only or shell only account, they are on their own for
getting connected to the internet. (some have other accounts with us, some
do not).
--
Troy Settle
Network Administrator, iPlus Internet Services
http://www.i-Plus.net
++ Ascend Users Mailing List ++
To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd: <http://www.nealis.net/ascend/faq>