>
>   ipchains -A input -p tcp -s machine.domain.com.au -d 0/0 80 -j REJECT
>
> Will that then deny port 80 to 192.168.1.100, or will it deny it to
> machine.domain.com.au (as its DHCP - the ip address may change tomorrow)
>
> These are all internal addresses - not externals.
>
> Thanks,
>
> > -----Original Message-----
> > From: George Vieira [mailto:[EMAIL PROTECTED]]
> > Sent: Wednesday, 22 November 2000 3:01 PM
> > To: 'Des Wass'
> > Subject: RE: [SLUG] IPChains and DNS
>

I think the path you should take is proxy auth.
configure squid to authenicate the surfers.
That way it is based on the user and not the system.  After all, anyone can
hit cancel at a login and use the PC to surf and the person who owns the PC
gets nailed for it.

my 2c
Ian.



-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Reply via email to