Re: BillMax questions -- Proxying Suspended Customers

[Chris Snyder <casnyder@pennswoods.net>]

I'd like to know how others are doing this as well.

Currently what we do is (for a similar situation, but not involving
suspended customers) have radius hand them an ip out of a special
reserved ip pool.  All traffic then goes through a linux box configured
as a router which uses iptables to route normal ip traffic normally, and
the special ip pool to a single box.

That box runs a BSD operating system, which is locked down very tightly.
The web browser on there is Apache, most / all of the default pages are
stripped off of it, and the ErrorDocuments all point to a cgi script
that does the processing for the customer that we want them to see.

It works well, to the limits of a linux box's routing abilities.  Which
is to say that there is probably a better way to do it with honest to
God routing hardware rather than a couple of Xeon processors.

Alternative ideas are appreciated.  Also please note that I've glossed
over the way radius decides which customers get handed the special ips.
This is because I have a weak grasp of radius, and I'm not the one that
manages it.

Thanks,
Chris

On Mon, 2005-11-07 at 22:47 -0500, Jason 'XenoPhage' Frisvold wrote:
> Hi all,
> 
>     This isn't a billmax specific question, per se, but it has billmax
> involved..  :)
> 
>     We have several Patton RAS devices, as well as a Redback SMS-500. 
> We'd like to allow suspended users to log in, but force them to a
> special web page where they can send in payment, etc.  I've looked at
> Framed-Routes, Filter-IDs, and other methods of doing this, but I'm not
> sure which is the best to use.
> 
>     I know others have done this..  Anyone wanna share?
> 
> Thanks!
> 

-----------------------------------------------------------------------------
To unsubscribe from the "BillMax Questions" mailing list, please
send a message to "majordomo@billmax.com" with "unsubscribe questions"
in the message body. The message must be sent from the exact email
address on the list.