Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 28 Sep 2007 11:06:05 -0700
From:      Chuck Swiger <cswiger@mac.com>
To:        Agus <agus.262@gmail.com>
Cc:        freebsd-questions <freebsd-questions@freebsd.org>
Subject:   Re: Deny access from localhost to internet.....
Message-ID:  <8151EECC-1EEA-4778-8AFE-6BBC4193884A@mac.com>
In-Reply-To: <fda61bb50709281051j4953c79bi295138355edc9ad0@mail.gmail.com>
References:  <fda61bb50709281051j4953c79bi295138355edc9ad0@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sep 28, 2007, at 10:51 AM, Agus wrote:
> The question is this..I want to restrict external access, that is  
> from my
> BSD to the internet, to some groups of users. Other groups i want  
> to access
> internet normally. I dont want this group of users to be able to  
> establish
> connections to the internet but yes to the internal systems on the  
> LAN...
>
> Is this possible without hacking the kernel?

Sure.  Install a proxy mechanism like SOCKS or Squid (if you just  
want to control web traffic) which requires users to authenticate  
before they are allowed to connect to the net...

-- 
-Chuck




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8151EECC-1EEA-4778-8AFE-6BBC4193884A>