From owner-freebsd-questions  Sun Sep 23 11:16:35 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from mail5.nc.rr.com (fe5.southeast.rr.com [24.93.67.52])
	by hub.freebsd.org (Postfix) with ESMTP id 5319937B40F
	for <freebsd-questions@freebsd.org>; Sun, 23 Sep 2001 11:16:32 -0700 (PDT)
Received: from i8k.babbleon.org ([66.57.85.154]) by mail5.nc.rr.com  with Microsoft SMTPSVC(5.5.1877.687.68);
	 Sun, 23 Sep 2001 11:24:57 -0400
Content-Type: text/plain;
  charset="iso-8859-1"
From: Brian T.Schellenberger <bts@babbleon.org>
To: green <green@prokk.net>, freebsd-questions@FreeBSD.ORG
Subject: Re: internet limitation
Date: Sun, 23 Sep 2001 11:24:58 -0400
X-Mailer: KMail [version 1.2]
References: <365999794.20010923181102@prokk.net>
In-Reply-To: <365999794.20010923181102@prokk.net>
MIME-Version: 1.0
Message-Id: <01092311245800.00619@i8k.babbleon.org>
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Sunday 23 September 2001 11:11, green wrote:
> hi !
>
> i have 10 computers looks like this
>
>        internet
>
>        freebsd
> ----------|-------------
>
> _  _  _   _   _  _  _  _
> windows 98/95 users
>
> how can i deny acces to internet
> win95/98 users depends with what login
> win95/98 user log-on into the network ?
> i think i need samba
> but i don't know how to configure samba to deny acces to the internet
> to specific users..
>
> perhabps i need samba+other app ?

Samnba is only concerned with the SMB protocol, not the TCP/IP protocol that 
the internet uses.

And you can do lots of control over who access what, but only based on the IP 
addresses, not based on the users, if you use the usual IP forwarding.

The only way I could see to do this would be to set up a full-blown proxy 
server which could get some sort of authentication from the users.  It might 
be possible to set it up so that this authentication was based on their 
Windows login but would probably be far simpler to just make them use a 
separate "internet login" onto the proxy server.

But in any case I don't think this will be easy to do.

>
> please suggest me something
> thank you
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message

-- 
Brian T. Schellenberger . . . . . . .   bts@wnt.sas.com (work)
Brian, the man from Babble-On . . . .   bts@babbleon.org (personal)
                                        http://www.babbleon.org

--------------------> Free Dmitry Sklyarov! <-------------------------

http://www.eff.org                 http://www.programming-freedom.org 

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message