From owner-freebsd-questions  Thu Apr 17 06:50:20 1997
Return-Path: <owner-questions>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id GAA02250
          for questions-outgoing; Thu, 17 Apr 1997 06:50:20 -0700 (PDT)
Received: from omni.norilsk.ru (infoce-2-ll.ll4.relcom.ru [193.124.250.50])
          by freefall.freebsd.org (8.8.5/8.8.5) with SMTP id GAA02242
          for <questions@freebsd.org>; Thu, 17 Apr 1997 06:50:08 -0700 (PDT)
Received: from matrix.omni.norilsk.ru by omni.norilsk.ru with ESMTP id RAA04082;
  (8.6.11/vak/1.9) Thu, 17 Apr 1997 17:43:03 +0400
Message-Id: <199704171343.RAA04082@omni.norilsk.ru>
From: "Artem Koutchine" <matrix@norilsk.ru>
To: <questions@freebsd.org>
Subject: Local net + initernet (interesting idea)
Date: Thu, 17 Apr 1997 21:42:42 +0700
X-MSMail-Priority: Normal
X-Priority: 3
X-Mailer: Microsoft Internet Mail 4.70.1155
MIME-Version: 1.0
Content-Type: text/plain; charset=KOI8-R
Content-Transfer-Encoding: 7bit
Sender: owner-questions@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

Hello!

	Recently one very interesting question came up and
i just could not figure out teh solution.

We are and ISP and also decided to make a very interesting thing
such as city intranet (thanks god our city is pretty compact). In this
light the problems that came up were

1) How to give them access to the server via PPP with kinda (see below)
    real IP addresses and give no access to the outside world
2) How to limit or even deny access to out ftp site.

The coditions are:
1) The same phone lines for real i-net users and city net users ** VERY
INPORTANT**
    Both users MUST use the same phone line. The separation of phone lines
is impossible.
2) Both type of users MUST be able to use things such as WEB and NET
MEETING and
    IRC (that is why both types need real ip)
3) City net users must have limited access to the server per day. (for
example only 2
    hours per day)
4) No shell for city net users.
5) City users MUST have their own web pages, which are accessible from
anywhere in
    the world, or (if possible) only from the city net.
6) City user MUST have ability to send mail to each other and anywhere in
the world.

Part of the sollution is in using PAP (not shell account), but it mean no
POP3, SMTP mail!
Another problem is how do i limit access only to the local city net
(basically within one server), so
they still can use WEB, NET MEETING, but only to browth locla web bbs and
connect to other
LOCAL user using net meeting. Maybe ANNEX would help ? I don't know much
about annex.

I am sure that it COULD be accomplished.. nothing is impossible if it is
UN*X!!!

Regards,
Artem Koutchine

PS: If this letter gets to a russian speaking person, write in russian
please :)