Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 0 down vote favorite

I build a gateway that will do client authentication before to use the Internet. All this stuff using CoovaChilli and FreeRADIUS. I want to be able to add dynamically some firewall rules related to user. For example packets limit or connections limit on a port. Is there some "tools" what I can use for doing this? I also use squid and DansGuardian but I'm not sure if I can put firewall rules related to client with those.

To be clearer you should understand the following:

  • the client authentication is done with FreeRADIUS that uses PAP method, so to use iptables, I will need to add/remove dynamically generated rules when user gets connected/disconnected. This also mean additional work as long as the username is not related to Linux system's users.
  • to make this with DansGuardian or squid I'm not sure if is possible, so if you have suggestions, let me know

I need to know: If you have some ideas or suggestions how to get this implemented. Also, if you think I'm wrong in my approaches, fell free to correct me.

share|improve this question

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.