gateway access security?

andzerger · 02-19-2004, 11:11 PM

Id like for users on the LAN to be required to submit a username and password before their web services are enabled .. can someone tell me where to look for more guidance?

ohyeah-- RH9 std. distro

flashingcurser · 02-19-2004, 11:56 PM

I've never set up what you are trying to acomplish, however how you do it is to set up a proxy with authentication and make it transperent with your firewall script on your router.

Have a look here for a firewall that sets up transparent proxy through iptables.

Look at squid proxy. There are many other proxy servers out there if you do a search on freshmeat you may find one that work better for your needs. You will need to set up your proxy for authentication.

Have fun

g0bl1n_k1ng · 02-20-2004, 12:53 AM

check out Nocat Auth at http://nocat.net
it allows a user to collect an IP via DHCP,
then when the user opens a browser to the web, they are redirected
to a splash page (which can be encrypted) where they enter a
username password combo.. if authenticated, the firewall ruleset
will be adjusted to allow that mac address through.
i use it on my public wireless access points, and
it works great. also it's easy to install and configure.

andzerger · 02-20-2004, 12:57 AM

thanks, this is exactly what i needed

g0bl1n_k1ng · 02-20-2004, 01:01 AM

let me know how this works out for you..
i don't communicate with any users of this software, and it
would be nice to get someone elses perspective