RE: FW: [LUNI] Firewall rights by SID or SMB login?

From: administrator@shapedwire.com
Date: Thu Mar 01 2001 - 11:19:29 CST

  • Next message: Thaddeus L. Olczyk: "Re: [LUNI] What's the real deal with network cards"

    I was originally thinking something along the lines of a tunnel
    from a Samba server, but I think I came up with a much cleaner
    way.
    http://www.linuxdoc.org/HOWTO/mini/Divert-Sockets-mini-HOWTO-6.html
    is link to diverting sockets with IPCHAINS
    Anyway, in order to divert, it has to read the packet, and if you
    sniff a packet from port 139 to port 4246 you will see:
    <snip>
    0007 ......A.......
    0008 ..*.....5...@...
    0009 FILES.administra
    000A tor.SHAPEDWIRE.S
    000B HAPEDWIRE..
    </snip>
    giving the username (administrator) in plain text.
    so while this may be a guess, what would be wrong with adding
    some filter to the divert_socket source code?
    Still playing with it here and looking for ideas :)
    Eric

    >You know, I was thinking something very similar. I didn't know
    >if it was
    >possible or not, but I'd really have little idea on how to try
    >to get that
    >to work. Let me know if you come up with anything. I'd appreciate it.
    >I'm trying to keep them from going with the M$ BS.

    >> What about using Samba as a gateway to the router/firewall?
    >> Let me play with it at my office today, I'll let you
    >> know if I'm way off base or not :)
    >> Eric
    >
    >
    >>>Suggest two gateways... one limited - one full
    >>>Internet --firewall1 --Admin --firewall2 --Rest of school
    >>>use SSH to form school to admin if more ports are need.

    -=-
    Linux Users Of Northern Illinois: General Discussion Mailing list.
    For unsubscription, archives, and announcements only see http://luni.org



    This archive was generated by hypermail 2b29 : Thu Mar 01 2001 - 11:13:57 CST

  •