Kevin Kretz
2018-11-29 22:53:22 UTC
Hi,
I'm using an external ACL script to allow/limit access based on some factors including (authenticated) username, client IP, the domain of the requested URL.
I'd also like to base the access on the port of the destination. Most would just be 80 or 443, but I'd like to limit/allow access to particular ports with the external script based on the other factors (a rule that would allow a connection to domain.com on port 80 from user 'user' coming from his IP address, for example), so a simple "acl allow_port port 80" would be too broad.
It looks, though, like the <lp format code doesn't have a value until after the connection is made (or attempted) so I can't use it for this purpose.
Is there a way to provide the desired port to the external ACL along with the other information?
thanks
Kevin
I'm using an external ACL script to allow/limit access based on some factors including (authenticated) username, client IP, the domain of the requested URL.
I'd also like to base the access on the port of the destination. Most would just be 80 or 443, but I'd like to limit/allow access to particular ports with the external script based on the other factors (a rule that would allow a connection to domain.com on port 80 from user 'user' coming from his IP address, for example), so a simple "acl allow_port port 80" would be too broad.
It looks, though, like the <lp format code doesn't have a value until after the connection is made (or attempted) so I can't use it for this purpose.
Is there a way to provide the desired port to the external ACL along with the other information?
thanks
Kevin