Authentication and Content filter

[Fernando Pizarro]

El 22/07/15 a las 15:04, Andrés Gómez escribió:
> Hi everybody!!
>
> I'm using a captive portal + freeradius + mysql to do AAA of users in a
> private network. All work great. I can set timeout, up/down speed, etc., by
> groups/profiles (using tables groupradcheck, grouradreply, etc in my mysql
> DB). But Now I need to do an extra control. I need to implement a content
> control based on the freeradius's user profiles.
>
> I mean.
> User of group1 can surf only on some list of websites.
> User of group2 can surf only on .edu domines.
> User of group3 have free surf.
>
> I know it's not a task of freeradius to do content filter, but I have seen
> than can do some integration with another free servers like Squid.
>
> I appreciate if you can give me your advices.
>
> Regards,
>
Sorry, I can try explain better.

If you freeradius act like router between your private network and 
Internet. Create diferent VLANs on the machine and add in your profiles 
Dynamic VLAN attributes for the groups.

On Squid, create diferent ACLs for the radius profile with your filters.

Sorry for my language.