Permitting access to a service only for enabled customers

Started by Lucas Alexandre

Permitting access to a service only for enabled customers   28 September 2010, 13:05

Hi Andrew,

Is possible to permit access to a service only for enabled customers?

Ex:

RULE 1: ACCESS TO A DNS SERVICE
TRANSFER RATE: UNLIMITED
SOURCE: 10.10.10.1 TO 10.10.10.253 - PORT: ALL (is possible to change this to only enabled customers???)
DESTINATION: LOCALHOST (SERVER 10.10.10.254) - PORT: 53

RULE 2: JOHN (CUSTOMER)
TRANSFER RATE: 256 KBPS
SOURCE: 10.10.10.1 - PORT ALL
DESTINATION: ALL - ALL

RULE 3..4....5....6.... (CUSTOMERS WITH IP 10.10.10.X)

FINAL RULE (BLOCK ALL TO ALL)


I think that in current version I need to create two rules to every customer... or it is possible on this version?

Thanks!!
SoftPerfect Support forum - Andrew avatar image

Re: Permitting access to a service only for enabled customers   29 September 2010, 04:54

Hi Lucas,

As far as I understand you could make it as follows. You don't actually need the DNS rule because the customer rules supersede the DNS rule:

RULE 1: JOHN (CUSTOMER)
TRANSFER RATE: 256 KBPS
SOURCE: 10.10.10.1 - PORT ALL
DESTINATION: ALL - ALL

...other customers...
...finally your blocking rule.

As the result, customers listed above the blocking rule can both access the Internet and access the DNS service. Those unlisted can't do either. As you can see SRC 10.10.10.1:ALL to DST: ALL:ALL includes SRC: 10.10.10.1 to DST: LOCALHOST: 53.

Andrew.

Re: Permitting access to a service only for enabled customers   29 September 2010, 09:23

lol... I am feel like a dumb smile

My question is:

in this form, this customer will access the DNS Service througth 256 KBPS ok? ex:

RULE 1: JOHN (CUSTOMER)
TRANSFER RATE: 256 KBPS
SOURCE: 10.10.10.1 - PORT ALL
DESTINATION: ALL - ALL

Is possible the rule1 access DNS through UNLIMITED without create two rules like this ex:

RULE 1: JOHN (CUSTOMER) - DNS
TRANSFER RATE: UNLIMITED
SOURCE: 10.10.10.1 - PORT ALL
DESTINATION: LOCALHOST - PORT 53

RULE 2: JOHN (CUSTOMER) - INTERNET
TRANSFER RATE: 256 KBPS
SOURCE: 10.10.10.1 - PORT ALL
DESTINATION: ALL - ALL

because if I use this rule above all rules, I will open the service to all network (10.10.10.0/24) ex:

RULE 1: ACCESS TO A DNS SERVICE
TRANSFER RATE: UNLIMITED
SOURCE: 10.10.10.1 TO 10.10.10.253 - PORT: ALL
DESTINATION: LOCALHOST (SERVER 10.10.10.254) - PORT: 53


I think that is not possible on this version of BWM... but you can implement this feature on newer version.... (feature: In the same rule a field to put services that will pass in other transfer rate)

Thanks Andrew!

Sometimes you can get the answer faster if you try the forum search and/or have a look at the software user manual to see if your question has already been answered.

Our forum rules are simple:

  • Be polite.
  • Do not spam.
  • If possible, check your spelling and grammar.

Author:

Email:

Subject

A brief and informative title for your message, approximately 4–8 words:

     

Spam prevention: please enter the following code in the input field below.

 ********  **     **  **    **  ********         ** 
 **        ***   ***  ***   **  **     **        ** 
 **        **** ****  ****  **  **     **        ** 
 ******    ** *** **  ** ** **  ********         ** 
 **        **     **  **  ****  **         **    ** 
 **        **     **  **   ***  **         **    ** 
 ********  **     **  **    **  **          ******  

Message: