MAC Address Blacklist

[anonymous]

 free css hosting  Pharmacie sur internet  Farmacia Espanola  Cheap Generics online  Medicaments en ligne

[wifidog-at-moose.to]

I have this working without the custom error messages, it just drops packets from the blocked MAC list altogether.

How would you like to get a copy of it?

[benoitg]

Everything needed on the gateway side is already there.

The changes needed for basic functionality in the auth server are:

• Add a network_had_blacklist and blacklist table in the db. The latter would (for now) only have a guuid and a MAC adress field.
• Add a UI for it. This implied writing a very simple "Blacklist" object that inherits from generic object, and hooking it in from Network::getAdminUI() and Network::processAdminUI()
• Actually use the blacklist during login attempt (at the token creation stage. This should be authenticator independent.
• Optionally, also prevent creating an account from that computer. This MUST somehow be done within the AuthenticatorLocalUser? code even if additional hooks have to be written), not in the general auth or signup code.

The above should be fairly simple, and fairly future proof (in the future there will be much more complicated use case than static, persistent MAC based blacklists).

[igough]

Seems to be an awful lot of requests for this feature. Has it been started yet?

[benoitg]

Well, now that dynamic abuse control is implemented, there is much less incentive to finish a GUI for static MAC blacklists.

[Robin Jones]

The GUI is finished in the branch NetworkFusion?. It is just waiting for someone to help with the SQL.