Cedric Blancher writes: > Le lun 26/04/2004 à 19:35, Travis Johnson a écrit : > > I am looking to re-direct my customers that are past due to a > > different web page. > > Then transparent proxying is what you need and do not require > promiscuous mode. If the context is local users (such as dialup customers) accessing the internet, it's not necessary to run a proxy to divert them to a different web page. I do this with a combination of policy routing and DNAT. First, set aside a small block of IP addresses to be assigned only to overdue customers. RADIUS does this easily. Then route all web queries from these addresses to the overdue site using policy routing. I do this in a Cisco because it's there, but most any modern router, including a Linux box, will do. Then on the overdue site box, DNAT all packets from those sources to the IP address and port of the overdue site. This works like a charm and completely ignores traffic to/from other users. -- Dick St.Peters, stpeters@xxxxxxxxxxxxx
