Mailing List Archive

Authentication with iptables?
Hi all,
I there a way to authenticate a machine behind the netfilter firewall before
you forward it's packets. For example, if i remember correctly, checkpoint
firewall have an nt authentication module.


* - * - *
Tzahi Fadida
Tzahi@mailandnews.com
Fax (+1 Outside the US) 240-597-3213
* - * - * - * - * - *
Re: Authentication with iptables? [ In reply to ]
you can filter by MAC-address which I guess would be a way of identifying each
machine uniquely (unless they switch NIC's of course). Or do you mean
authenticate users like Secure Remote does ? In this case I have no clue but
would also be intereseted to know.

Pol Muaddib wrote:

> Hi all,
> I there a way to authenticate a machine behind the netfilter firewall before
> you forward it's packets. For example, if i remember correctly, checkpoint
> firewall have an nt authentication module.
>
> * - * - *
> Tzahi Fadida
> Tzahi@mailandnews.com
> Fax (+1 Outside the US) 240-597-3213
> * - * - * - * - * - *
RE: Authentication with iptables? [ In reply to ]
Hello,

It would be possible to write a wrapper application with the samba libraries
that authenticated users against a domain controller or a local list of
users, and then dynamically added rules into iptables to allow traffic from
that computer. However I don't believe that there is anyone working on this
currently.

It would be a very interesting project, and if you are really interested in
such a thing, I would talk with the samba developers at www.samba.org.

Andrew Hoying
http://leaf.sourceforge.net/devel/wolffang

> -----Original Message-----
> From: netfilter-admin@lists.samba.org
> [mailto:netfilter-admin@lists.samba.org]On Behalf Of Alex
> Sent: Wednesday, July 25, 2001 12:15 PM
> To: muaddib@mailandnews.com
> Cc: netfilter@lists.samba.org
> Subject: Re: Authentication with iptables?
>
>
> you can filter by MAC-address which I guess would be a way of
> identifying each
> machine uniquely (unless they switch NIC's of course). Or do you mean
> authenticate users like Secure Remote does ? In this case I have
> no clue but
> would also be intereseted to know.
>
> Pol Muaddib wrote:
>
> > Hi all,
> > I there a way to authenticate a machine behind the netfilter
> firewall before
> > you forward it's packets. For example, if i remember correctly,
> checkpoint
> > firewall have an nt authentication module.
> >
> > * - * - *
> > Tzahi Fadida
> > Tzahi@mailandnews.com
> > Fax (+1 Outside the US) 240-597-3213
> > * - * - * - * - * - *
>
>
>