req: hostname filter

Message

eyebex · #1 Post by **eyebex** » 2004-08-31 16:16

i just want to come up with a request / suggestion: what about adding a hostname filter additionally to the recently introduced ip filter? a user should gain access only if a regular expression machtes against the hostname the client's ip resolves to. this way, a little more security could be added for user's that normally login in from dsl with changing ips: one could easily limit login attempts to ips that resolve to e.g. ".*\.t-ipconnect\.de".

eyebex · #2 Post by **eyebex** » 2004-09-01 23:13

hey tim

how do you like my feature suggestion?

#3 Post by **botg** » 2004-09-02 08:12

Feature request always result in more work. So basically I like none

eyebex · #4 Post by **eyebex** » 2004-09-02 17:45

Okay, you say "basically" ... so this one has a chance to be implemented?

#5 Post by **botg** » 2004-09-02 18:56

Yes, the idea sounds not that bad.

DSmidgy · #6 Post by **DSmidgy** » 2004-11-13 17:02

I have some suggestion for IP filter too. But I think it's easy to implement

When the IP is bloched, I get "550 No connections allowed from your IP".
Can there be a checkbox in IP filter menu, wich would drop packets from these filtered IPs instead of returning that error message.

Tropics · #7 Post by **Tropics** » 2004-11-14 23:36

no, because the ip filter is *per user*. so only after the user logged in we can decide if we have to drop him again or let him access everything.
a workaround could be a seperate global ip filter, which could drop packets if they are from globally blocked ips.

#8 Post by **botg** » 2004-11-14 23:45

Silent blocking is never a good idea and I consider it very impolite.