Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 5 Apr 2001 17:09:14 -0400
From:      "ScaryG" <scaryg@sputnik.org>
To:        "Kurtis Smith" <ksscendyn@yahoo.com>
Cc:        <freebsd-questions@FreeBSD.ORG>
Subject:   Re: Traffic shaping natd dhcp and ipfw
Message-ID:  <013501c0be14$ab0838c0$0f01a8c0@phantom>
References:  <008401c0bdf7$cfba03a0$0f01a8c0@phantom> <5.0.2.1.0.20010405113021.00a6fc00@pop.mail.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> Ok so what I could do then is stop the DHCPD service
> which would suck for more computers adding to the network

 That depends...

 As I understood it, you wish to control what stations have Internet
access?

 If you use DHCP the stations would get a different IP number each day, and
that kinda destroy your ability to handcuff them on a per machine basis.

 So yes, perhaps not using DHCP may be part of your solution.

 However, next up, can you not determine who has access to your daemons by
using /etc/hosts.deny and /etc/hosts.allow? That would let you limit
telnet, ftp, email.

 From there you could use ipfw to dump outgoing traffic on port 80 for a
particular workstation, etc.

-Gerry



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?013501c0be14$ab0838c0$0f01a8c0>