Ticket #285 (new Feature Request)

Opened 15 years ago

Last modified 12 years ago

MAC Address Blacklist

Reported by: anonymous Owned by:
Priority: normal Milestone: WifiDog Auth Server 1.1
Component: Auth server, Authentication, permissions and access control Version: Gateway 20090925
Keywords: MAC Blacklist Cc:

Change History

Changed 15 years ago by benoitg

  • type changed from Bug report to Feature Request

Changed 15 years ago by wifidog-at-moose.to

I have this working without the custom error messages, it just drops packets from the blocked MAC list altogether.

How would you like to get a copy of it?

Changed 14 years ago by benoitg

  • component changed from Auth server, Other to Auth server, Authentication, permissions and access control
  • milestone changed from WifiDog Auth Server 2.0 to WifiDog Auth Server 1.1

Everything needed on the gateway side is already there.

The changes needed for basic functionality in the auth server are:

  • Add a network_had_blacklist and blacklist table in the db. The latter would (for now) only have a guuid and a MAC adress field.
  • Add a UI for it. This implied writing a very simple "Blacklist" object that inherits from generic object, and hooking it in from Network::getAdminUI() and Network::processAdminUI()
  • Actually use the blacklist during login attempt (at the token creation stage. This should be authenticator independent.
  • Optionally, also prevent creating an account from that computer. This MUST somehow be done within the AuthenticatorLocalUser? code even if additional hooks have to be written), not in the general auth or signup code.

The above should be fairly simple, and fairly future proof (in the future there will be much more complicated use case than static, persistent MAC based blacklists).

Changed 13 years ago by igough

Seems to be an awful lot of requests for this feature. Has it been started yet?

Changed 13 years ago by benoitg

Well, now that dynamic abuse control is implemented, there is much less incentive to finish a GUI for static MAC blacklists.

Changed 13 years ago by Robin Jones

The GUI is finished in the branch NetworkFusion?. It is just waiting for someone to help with the SQL.

Changed 12 years ago by jodoreps

  • version set to Gateway 20090925
  • description modified (diff)
Note: See TracTickets for help on using tickets.