TCP/ UDP SMTP, POP, HTTP, SIP services FreeRADIUS
Dear List How can i configure FreeRADIUS to allow a user for following SMTP, POP, HTTP, SIP services Only? No other network access. PORTS: 25,110,143 80, 5060,5061 Thanks RM --
On 29 Sep 2014, at 12:17, Russell Mike <radius.sir@gmail.com> wrote:
Dear List
How can i configure FreeRADIUS to allow a user for following SMTP, POP, HTTP, SIP services Only? No other network access.
PORTS: 25,110,143 80, 5060,5061
FreeRADIUS doesn't control which ports a user uses, that's the NAS. There are no RFC attributes to do what you want I suggest you contact your NAS vendor for documentation. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Thanks Arran. On Mon, Sep 29, 2014 at 4:30 PM, Arran Cudbard-Bell < a.cudbardb@freeradius.org> wrote:
On 29 Sep 2014, at 12:17, Russell Mike <radius.sir@gmail.com> wrote:
Dear List
How can i configure FreeRADIUS to allow a user for following SMTP, POP, HTTP, SIP services Only? No other network access.
PORTS: 25,110,143 80, 5060,5061
FreeRADIUS doesn't control which ports a user uses, that's the NAS. There are no RFC attributes to do what you want I suggest you contact your NAS vendor for documentation.
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team
FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
By example, I use custom vendor attribute "Airespace-ACL-Name" to set an existing access-list that will be applied to this user's traffic. But you must define the ACL in the NAS (in the Wireless Controller in this case). -- Ángel Franch Manchón <angel.franch@cnic.es> Informatica y Sistemas Centro Nacional de Investigaciones Cardiovasculares PGP: 0x6AB40B7A 6DB0 6AD2 28F5 7BA5 C875 856F B400 A6F4 6AB4 0B7A -----Original Message----- From: freeradius-users-bounces+angel.franch=cnic.es@lists.freeradius.org [mailto:freeradius-users-bounces+angel.franch=cnic.es@lists.freeradius.org] On Behalf Of Arran Cudbard-Bell Sent: Monday, September 29, 2014 6:31 PM To: FreeRadius users mailing list Subject: Re: TCP/ UDP SMTP, POP, HTTP, SIP services FreeRADIUS On 29 Sep 2014, at 12:17, Russell Mike <radius.sir@gmail.com> wrote:
Dear List
How can i configure FreeRADIUS to allow a user for following SMTP, POP, HTTP, SIP services Only? No other network access.
PORTS: 25,110,143 80, 5060,5061
FreeRADIUS doesn't control which ports a user uses, that's the NAS. There are no RFC attributes to do what you want I suggest you contact your NAS vendor for documentation. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2 *************** AVISO LEGAL *************** Este mensaje va dirigido, de manera exclusiva, a su destinatario y contiene información confidencial y sujeta al secreto profesional, cuya divulgación no está permitida por la ley. En caso de haber recibido este mensaje por error, le rogamos que, de forma inmediata, nos lo comunique mediante correo electrónico remitido a nuestra atención o a través del teléfono (+34 914531200) y proceda a su eliminación, así como a la de cualquier documento adjunto al mismo. Asimismo, le comunicamos que la distribución, copia o utilización de este mensaje, o de cualquier documento adjunto al mismo, cualquiera que fuera su finalidad, están prohibidas por la ley. Le informamos, como destinatario de este mensaje, que el correo electrónico y las comunicaciones por medio de Internet no permiten asegurar ni garantizar la confidencialidad de los mensajes transmitidos, así como tampoco su integridad o su correcta recepción, por lo que el CNIC no asume responsabilidad alguna por tales circunstancias. Si no consintiese la utilización del correo electrónico o de las comunicaciones vía Internet le rogamos nos lo comunique y ponga en nuestro conocimiento de manera inmediata. *************** LEGAL NOTICE ************** This message is intended exclusively for the person to whom it is addressed and contains privileged and confidential information protected from disclosure by law. If you are not the addressee indicated in this message, you should immediately delete it and any attachments and notify the sender by reply e-mail or by phone (+34 914531200). In such case, you are hereby notified that any dissemination, distribution, copying or use of this message or any attachments, for any purpose, is strictly prohibited by law. We hereby inform you, as addressee of this message, that e-mail and Internet do not guarantee the confidentiality, nor the completeness or proper reception of the messages sent and, thus, CNIC does not assume any liability for those circumstances. Should you not agree to the use of e-mail or to communications via Internet, you are kindly requested to notify us immediately.
WOW, Thanks for more information dear Angel F. N. Regards RM-- On Mon, Sep 29, 2014 at 4:46 PM, Ángel Franch Manchón <angel.franch@cnic.es> wrote:
By example, I use custom vendor attribute "Airespace-ACL-Name" to set an existing access-list that will be applied to this user's traffic. But you must define the ACL in the NAS (in the Wireless Controller in this case).
--
Ángel Franch Manchón <angel.franch@cnic.es> Informatica y Sistemas Centro Nacional de Investigaciones Cardiovasculares
PGP: 0x6AB40B7A 6DB0 6AD2 28F5 7BA5 C875 856F B400 A6F4 6AB4 0B7A
-----Original Message----- From: freeradius-users-bounces+angel.franch=cnic.es@lists.freeradius.org [mailto:freeradius-users-bounces+angel.franch=cnic.es@lists.freeradius.org] On Behalf Of Arran Cudbard-Bell Sent: Monday, September 29, 2014 6:31 PM To: FreeRadius users mailing list Subject: Re: TCP/ UDP SMTP, POP, HTTP, SIP services FreeRADIUS
On 29 Sep 2014, at 12:17, Russell Mike <radius.sir@gmail.com> wrote:
Dear List
How can i configure FreeRADIUS to allow a user for following SMTP, POP, HTTP, SIP services Only? No other network access.
PORTS: 25,110,143 80, 5060,5061
FreeRADIUS doesn't control which ports a user uses, that's the NAS. There are no RFC attributes to do what you want I suggest you contact your NAS vendor for documentation.
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team
FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
*************** AVISO LEGAL *************** Este mensaje va dirigido, de manera exclusiva, a su destinatario y contiene información confidencial y sujeta al secreto profesional, cuya divulgación no está permitida por la ley. En caso de haber recibido este mensaje por error, le rogamos que, de forma inmediata, nos lo comunique mediante correo electrónico remitido a nuestra atención o a través del teléfono (+34 914531200) y proceda a su eliminación, así como a la de cualquier documento adjunto al mismo. Asimismo, le comunicamos que la distribución, copia o utilización de este mensaje, o de cualquier documento adjunto al mismo, cualquiera que fuera su finalidad, están prohibidas por la ley. Le informamos, como destinatario de este mensaje, que el correo electrónico y las comunicaciones por medio de Internet no permiten asegurar ni garantizar la confidencialidad de los mensajes transmitidos, así como tampoco su integridad o su correcta recepción, por lo que el CNIC no asume responsabilidad alguna por tales circunstancias. Si no consintiese la utilización del correo electrónico o de las comunicaciones vía Internet le rogamos nos lo comunique y ponga en nuestro conocimiento de manera inmediata.
*************** LEGAL NOTICE ************** This message is intended exclusively for the person to whom it is addressed and contains privileged and confidential information protected from disclosure by law. If you are not the addressee indicated in this message, you should immediately delete it and any attachments and notify the sender by reply e-mail or by phone (+34 914531200). In such case, you are hereby notified that any dissemination, distribution, copying or use of this message or any attachments, for any purpose, is strictly prohibited by law. We hereby inform you, as addressee of this message, that e-mail and Internet do not guarantee the confidentiality, nor the completeness or proper reception of the messages sent and, thus, CNIC does not assume any liability for those circumstances. Should you not agree to the use of e-mail or to communications via Internet, you are kindly requested to notify us immediately.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Arran Cudbard-Bell -
Russell Mike -
Ángel Franch Manchón