Control user/group network access

kragsterman · 05-24-2007, 07:49 AM

Hi! I have been googled around for a while, and talking to some people, but no one seem to have a simple way to control the network access of users and groups. The thing is, that we have som complicated terminal servers, with many users and groups, that need to have different access to different network resources( different physical and virtual lan´s), and we need to control that. I´m sure it is possible with ip-tables and SELinux, but I´d be happy if we could sole it easier. Anyone? Brgrds Johan

osor · 05-24-2007, 03:11 PM

What’s wrong with iptables? Use the “owner” match.

kragsterman · 05-24-2007, 11:48 PM

Nothing wrong with ip-tables, just the wrong thing to use for the administrators of the clients we need it for. To complicated solutin for them to handle, I believe. Someone got another suggestion?