Re: NoCatSplash 0.92 released
Lars O.Grobe <[email protected]>
| Newsgroups | gmane.network.nocat |
|---|---|
| Message-ID | <[email protected]> |
Hi! The problem is that thos who are allowed to pass the (masquerading) filter are anonymous in the net. In fact, it's not only a problem, somehow I even like the idea, but if one of our authenticated users starts hacking a server, the admin of the attacked machine will just see the gateway's ip, and we won't have any way to find out the responsible user. We could log all outgoing connections on the firewall, of course, but this is not allowed for good reasons (of privacy). So we need a way to make it possible that the user is identified in case of abuse of the internet services. identp is one such mechanism, as it allows the server to request a identification hash from the client, and if the user did something bad and there is a complaint, the admin can complain about that user by passing the hash to the provider (the provider can find out the user id from the hash). This is used in multiuser-installations like terminals connected to a application-server, where all users use one ip. The only point in the net where this can be solved is the (nocat-)gateway. CU, Lars.