I build a gateway that will do client authentication before to use the Internet. All this stuff using
FreeRADIUS. I want to be able to add dynamically some firewall rules related to user. For example packets limit or connections limit on a port. Is there some "tools" what I can use for doing this? I also use
DansGuardian but I'm not sure if I can put firewall rules related to client with those.
To be clearer you should understand the following:
- the client authentication is done with
PAPmethod, so to use
iptables, I will need to add/remove dynamically generated rules when user gets connected/disconnected. This also mean additional work as long as the username is not related to
- to make this with
squidI'm not sure if is possible, so if you have suggestions, let me know
I need to know: If you have some ideas or suggestions how to get this implemented. Also, if you think I'm wrong in my approaches, fell free to correct me.