IP and User Based Access Rules

David Woodhouse dwmw2 at infradead.org
Fri Jun 18 01:20:20 PDT 2021


On Fri, 2021-06-18 at 11:15 +0300, Akın Kara wrote:
> Hello, 
> how do I create control rules like user-based and giving access based
> on destination IP? For example, a user only has access to one IP and
> port in my network. I use OpenBSD, As you probably know pf doesn't
> support user-based rules. I would appreciate any help. Thanks
> already.

Is this question about ocserv? Don't you get a tun device per user in
that case, which means that you can install that user's rules for
ingress packets on "their" device?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5174 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20210618/91688311/attachment.bin>


More information about the openconnect-devel mailing list