[NTLUG:Discuss] How do you secure a LAN?

[Paul Ingendorf]

Might I suggest rather than reinventing the wheel, a simple proxy app that 
requires the end user login prior to allowing access be used.  If I remember 
right squid will allow you to do this with a minor headache.

Quoting Bob Byron <bbyron at radit.com>:

> Thank You for all the insight.  After taking all of this into
> consideration,
> this is what I am going to do.  DHCP will be the address controller.  
> They can log onto the LAN at their convenience.  However, I am going 
> to write a web application that will update the firewall to allow
> internet
> access based on specific MAC address.  In order for a machine to go
> onto the internet, they must be self approved via the webapp, but that
> 
> does log the information and let's me know about the new machine.
> 
> There are too many logistical issues for me to control the ports on
> the
> switch directly.  The effort would be enourmous and inconvenient for
> the user.  This offers the desired control.
> 
> Thanks Again,
> Bob Byron
> 
> _______________________________________________
> https://ntlug.org/mailman/listinfo/discuss
> 



-- 
-->> mailto:pauldy at wantek.net
-->> http://www.wantek.net/
Running ....... Cos anything else would be a waste...
`:::\'                  .......  ......
 :::  *                  `::.    ::\'
 ::: .::  .:.::.  .:: .::  `::. :\'
 :::  ::   ::  ::  ::  ::    :::.
 ::: .::. .::  ::.  `::::. .:\'  ::.
:::.....................::\'   .::::..