Great Circle Associates Firewalls
(April 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Network Access Authentication...
From: Pedro Lineu Orso <porso @ usa . net>
Organization: Banco Bamerindus do Brasil SA
Date: Wed, 02 Apr 1997 08:08:29 -0300
To: Lo_Chi_Hou @ PHI-HKMRO . ccgw . nec . co . jp
Cc: Firewalls @ GreatCircle . COM
References: <199704020855 . RAA03106 @ gmsjp25 . gms . nec . co . jp>

Lo_Chi_Hou @
 PHI-HKMRO .
 ccgw .
 nec .
 co .
 jp wrote:
> 
>      Hi!!! I am currently working on an project that will require
>      me to do some authentication, audit, and accounting on both
>      dial up and LAN user's Internet usage in our University.
> 
>      For dial up we don't have much problem, there is the TACACS
>      and XTACACS that can be use for this purposes. But I am
>      having a problem when it comes to the LAN user. I need to
>      protect and prevent unauthorize users in the campus from
>      accessing the Internet.
> 
>      To do LAN user authentication and control, I am kind of
>      thinking may be a firewall or proxy may do the tricks.
> 
>      Something like the setup below:
> 
> 
>      Internet ----- Router ------+---- Proxy ----- Internal LAN
>                                  |
>                              Bastion Host
> 
>      The proxy should be able to do some authentication, and
>      accounting on the user.
> 
>      Can anyone tell me where I can find such a proxy? or any
>      other software that may help me solve the problem?
> 
>      TACACS use the wtmp format of UNIX for saving accounting
>      data(such as login and logout time, username... etc). I was
>      hoping that the proxy will also be able to log user info
>      in such a format for better management.
> 
>      Thanks in advance....
Hi Lo

Try Squid Proxy at http://squid.nlanr.net/Squid

The Squid authentication works fine for me.

Pedro L Orso
HSBC BAmerindus
orso @
 usa .
 net
Brazil


References:
Indexed By Date Previous: Re: which proxy server is beter?
From: Christian ALT <calt @ tla . ch>
Next: Re: which proxy server is beter?
From: m* <mark @ novare . net>
Indexed By Thread Previous: Network Access Authentication...
From: Lo_Chi_Hou @ PHI-HKMRO . ccgw . nec . co . jp
Next: Re: Network penetration test tool?
From: Sylvain Maret <smaret @ datelec . com>

Google
 
Search Internet Search www.greatcircle.com