Check out: http://www.linuxselfhelp.com/HOWTO/Authentication-Gateway-HOWTO/setup.html Scroll down to the 3.2 section. It has a link to a iptables PAM that supposedly will insert the proper iptables lines to allow the authenticated client access through the firewall. Hope this helps... Khanh Tran Network Operations Sarah Lawrence College -----Original Message----- From: Yogesh Subhash Talekar [mailto:yogesh@xxxxxxxxxxxxxxxx] Sent: Monday, April 28, 2003 8:35 AM To: netfilter@xxxxxxxxxxxxxxxxxxx Subject: iptables with LDAP authentication hi, I have a full Class C real IP network. All department have their own Linux servers and the last IP (X.X.X.254) is given to the CISCO router which is our gateway to Internet. Currently i have a OpenBSD firewall configured as bridge with IP-filter. Now I want to go with Linux firewall, if it will have following features: 1. It will run IP-tables firewall and will authenticate everyone (rather each session for each type of service .. http, ftp, ssh etc.) against the central LDAP server which is on some other server. 2. It will put on bandwidth restriction on each campus departmental server. (it is possible with tc/qdisc) All I want to know is ... is it possible to authenticate the traffic flowing thro' a Linux ip-tables bridging firewall against a central OpenLDAP database? Will it maintain the sessions for each user separately for HTTP (Squid?), FTP and telnet or ssh ? Is it possible to log per head traffic and ban them if the exceed some limit (say 200 MB per month). Any suggestions/ links / advice will be highly appriciated. thanks in advance --yogesh
