Do I need to write a module?
So, to do the HTTP redirect before authentication, it sounds like I will need a module or ????
What is the best way to control netfilter from Java, JNI or ????
This type of project is certain to have tricky little issues lurking about but, should be interesting!
Quoted 1 line
Quoted 1 line
Quoted 1 line
Ramin Dousti <[email protected]> 06/24/03 10:55AM >>>
Quoted 1 line · Tony Thompson
Thanks for the response. Maybe I should give a better picture of
what I
Quoted 2 lines
am trying to do. I have a private network that I am trying to route through a Linux box. I want to deny all traffic (from a MAC
address)
Quoted 1 line
until a user authenticates, with their browser, to a Java application
on
Quoted 1 line
the Linux server (when they authenticate, something has to happen to
let
Quoted 1 line
netfilter know that the MAC address is allowed to pass). There has
to
Quoted 2 lines
be some level of coordination at that point between the Java app and netfilter so that session timeouts, etc. can be handled. I would
like
Quoted 1 line
to have all of this happen as close to real time (i.e. not batched)
as
Quoted 5 lines
possible.
After writing this out, maybe I don't even need a module but, just a way to control netfilter from a Java app. I am still open to suggestions...
Yes, what you need is to control netfilter from a Java app.
Before the authentication, redirect his web traffic to your java app.
After the authentication, remove the MAC restriction for the client, add the necessary rules for his service.
Also, I'd implement some kind of timer to go off after certain period of inactivity and remove the permission of his MAC.
It sounds easy but I'm sure it's gonna be fun implementing it ;-)
Ramin
Quoted 3 lines
Thanks.
Tony