Re: php - inject code into $_SERVER ?
Dave Hull <[email protected]> Mon, 7 Feb 2005 13:10:22 -0600
| Newsgroups | gmane.comp.security.programming |
|---|---|
| Message-ID | <[email protected]> |
We have developed a solution that hopefully will be open sourced in the next few months. In a nutshell, we have a DHCP server that assigns non-routable (10.10.x.x) IP addresses to unknown hosts on the network. These hosts are redirected to a local authentication server via a simple DNS hack that redirects all requests to a host of our choosing. Once users have downloaded an application to their local machine and we have verified they are fully patched and are pulling updates for both OS and anti-virus software, we assign them a routable IP for our primary network and they are free to go whereever they want. There are some problems that we have solutions for, but are still implementing, like what to do for people who hard-code a routable IP address on their machines, etc. I'm sure our solution is not novel, I've seen captive portals in coffee shops that provide the same functionality. On Mon, 07 Feb 2005 12:28:37 +0100, Ole Martin Eide <[email protected]> wrote: > Dave Hull wrote: > > >Could you use the DHCPLEASEQUERY option for this? > > > >http://www.ietf.org/internet-drafts/draft-ietf-dhc-leasequery-07.txt > > > > > > Has anyone made a solution for LAN/WAN where user has to login through > web to gain access to the rest of the network? E.g. iptables drops > everything till successfull login has been made? Could someone give me > some pointers on it? > > Regards > Ole Martin Eide > -- Dave Hull [email protected]