I have seen proxy solutions that can do this, and you can create
different user groups in FW-1 for your policies (ouch!). I know that CSM
Proxy will let you specify filters by group, i.e. execs can go anywhere,
mgrs can surf most stuff, but users get only these limited sites. This is
all done through the NT user database, so users and groups are based on
an existing "directory" if you are using NT. One could also use LDAP I
guess with a proxy solution or FW-1 v.4 since it will be an LDAP client.
Carric Dooley
COM2:Interactive Media
http://www.com2usa.com
On Tue, 11 May 1999, Paul Hubbard wrote:
>
> Are there any packages/programs that will allow me to set things up like
> this:
>
> user aaa can login from local machines and *.earthlink.net
> user bbb can login from local machines and *.gte.net
> user ccc can login from anywhere
> all others can login only from local machines
>
> I'm in the process of looking at installing a Firewall here so if this is
> a function that's available in some, that would be nice to know. If there
> is something that will allow this feature (like a replacment /bin/login
> with extra options), that would be OK also.
>
> I know that I could write something and put it in the /etc/.login but that
> isn't something I'd really want to do
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
