[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] different users with different access privileges?


  • Subject: Re: [Openvpn-users] different users with different access privileges?
  • From: "Jan Mulders" <lastchancehotel@xxxxxxxxx>
  • Date: Tue, 9 Jan 2007 21:24:41 +0000

I have built a system that does dynamic tc traffic shaping rules for each user based on freeradius and Ralf's openvpn-radius script. However, this would be complete overkill for what you're trying to achieve - you're better off having two openvpn daemons issuing IPs from different ranges, on different tun devices (eg tun0 for group 1, tun1 for group 2), then set up rules in iptables that accomplish your goals.

May I recommend Shorewall (www.shorewall.net) as a good way of building these IPtables rules quickly and easily?

Hope this helps,

Jan

On 09/01/07, Charles Duffy <cduffy@xxxxxxxxxxx> wrote:
It's still pretty much iptables-based for that kind of thing.
Personally, with only two classes, I'd take the simplest route: Just run
two completely separate VPNs; that way, your iptables rules don't need
to be dynamically modified (as would be the case with a learn-address
script adding and removing host-specific rules as systems connect and
disconnect).


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users