Re: Looking for Possiblities
On Thu, 13 May 2004 21:53:41 -0500 Nick Marino [EMAIL PROTECTED] wrote: What I am looking for is a way to redirect a user to a specific web page on my web server if there account access has been restricted instead of setting for reject and locking them out totally. We are an ISP and need to block users access and redirect them to a specific web page if they have not payed thier bill and the account is on hold till it is resolved. Is there any way to do this using freeradius? I think the assigning them a none standard IP is the best route. On your NASes configure that IP Range to an interface that is connected to a webredirection box and no external access. Perhaps run it through a box with squid so any requests for any page are redirected to the webserver on that box. If you are using something more advanced like Redback SMS's or customers arrive via a tunnel, you could add the necisary attributes to direct them down a different route. -- - Graeme Hinchliffe (BSc) Core Internet Systems Designer Zen Internet (http://www.zen.co.uk/) ICQ 3842605 (link) Direct: 0845 058 9074 Main : 0845 058 9000 Fax : 0845 058 9005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Looking for Possiblities
Have any more detailed info on how to assing a special dns via radius and how to setup a wild card? - Original Message - From: Julien freeradius [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, May 13, 2004 10:31 PM Subject: Re: Looking for Possiblities Hello, You should effectively assign him an local IP address and a special dns with wildcard that point to your server. So any http request will open your server webpage... Maybe that there is better solutions for that, it's just a suggestion. Nick Marino wrote: What I am looking for is a way to redirect a user to a specific web page on my web server if there account access has been restricted instead of setting for reject and locking them out totally. We are an ISP and need to block users access and redirect them to a specific web page if they have not payed thier bill and the account is on hold till it is resolved. Is there any way to do this using freeradius? I know I can assign them a specific IP address like maybe a private address to restrict them from surfing or accessing the internet but is there a way to display them a message so they will know why they have been put on restricted access. Any Ideas would be greatly appreciated. I am running Freeradius with mysql on Linux and have apache web server. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __ NOD32 1.679 (20040318) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Looking for Possiblities
Well all customers connect via dialup to a Max 6000 unit. - Original Message - From: Graeme Hinchliffe [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, May 14, 2004 3:12 AM Subject: Re: Looking for Possiblities On Thu, 13 May 2004 21:53:41 -0500 Nick Marino [EMAIL PROTECTED] wrote: What I am looking for is a way to redirect a user to a specific web page on my web server if there account access has been restricted instead of setting for reject and locking them out totally. We are an ISP and need to block users access and redirect them to a specific web page if they have not payed thier bill and the account is on hold till it is resolved. Is there any way to do this using freeradius? I think the assigning them a none standard IP is the best route. On your NASes configure that IP Range to an interface that is connected to a webredirection box and no external access. Perhaps run it through a box with squid so any requests for any page are redirected to the webserver on that box. If you are using something more advanced like Redback SMS's or customers arrive via a tunnel, you could add the necisary attributes to direct them down a different route. -- - Graeme Hinchliffe (BSc) Core Internet Systems Designer Zen Internet (http://www.zen.co.uk/) ICQ 3842605 (link) Direct: 0845 058 9074 Main : 0845 058 9000 Fax : 0845 058 9005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __ NOD32 1.679 (20040318) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Looking for Possiblities
It isn't really that hard, the work isn't in the MAX or the FR server. All you have to do is have a group for nopay users. Assign them out of a different IP pool, possibly even a private subnet. Then in the Next hop router, you would have to reroute all web traffic from that subnet to your webpage and block all other traffic. You can do the same, if you want to implement family safe web browsing, users who pay the extra get a different subnet, and get routed differently. -Original Message- From: [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] On Behalf Of Nick Marino Sent: Friday, May 14, 2004 8:35 AM To: [EMAIL PROTECTED] Subject: Re: Looking for Possiblities Well all customers connect via dialup to a Max 6000 unit. - Original Message - From: Graeme Hinchliffe [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, May 14, 2004 3:12 AM Subject: Re: Looking for Possiblities On Thu, 13 May 2004 21:53:41 -0500 Nick Marino [EMAIL PROTECTED] wrote: What I am looking for is a way to redirect a user to a specific web page on my web server if there account access has been restricted instead of setting for reject and locking them out totally. We are an ISP and need to block users access and redirect them to a specific web page if they have not payed thier bill and the account is on hold till it is resolved. Is there any way to do this using freeradius? I think the assigning them a none standard IP is the best route. On your NASes configure that IP Range to an interface that is connected to a webredirection box and no external access. Perhaps run it through a box with squid so any requests for any page are redirected to the webserver on that box. If you are using something more advanced like Redback SMS's or customers arrive via a tunnel, you could add the necisary attributes to direct them down a different route. -- - Graeme Hinchliffe (BSc) Core Internet Systems Designer Zen Internet (http://www.zen.co.uk/) ICQ 3842605 (link) Direct: 0845 058 9074 Main : 0845 058 9000 Fax : 0845 058 9005 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __ NOD32 1.679 (20040318) Information __ This message was checked by NOD32 antivirus system. http://www.nod32.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Looking for Possiblities
- Original Message - From: Anson Rinesmith [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, May 14, 2004 8:41 AM Subject: RE: Looking for Possiblities It isn't really that hard, the work isn't in the MAX or the FR server. All you have to do is have a group for nopay users. Assign them out of a different IP pool, possibly even a private subnet. Then in the Next hop router, you would have to reroute all web traffic from that subnet to your webpage and block all other traffic. You can do the same, if you want to implement family safe web browsing, users who pay the extra get a different subnet, and get routed differently. Ahh ok I understand that. Although ip's are assigned to clients right now by the MAX units them selves and not by free radius. I dont know how you would tell the client to use another gateway via when radius would assign the ip which I know how to do via dialup admin but I dont see in there where I can assing a gateway. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
