Separating IP addresses between users

[Jakub Szafrański]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 16.05.2012 21:06, Will Froning wrote:
> Hello Jakub,  
> 
> I've never used it, but have you looked at authpf(8)? A quick look at the man pages suggest you can have different NAT entries per-user.
> 
> Thanks,
> Will
> 
> --
> Will Froning
> Unix SysAdmin
> Will.Froning at GMail.com
> MSN: wfroning at angui.sh

Hi,

If I understand the manual page correctly, it allows for per user NAT
entriees, but only on their sshd(8) sessions. What I need is to separate
every service of an user - crontab launched software, php-spawned
applications, every possible aspect of his account.

A jail-based solution would be fine, so that the user can 'see' all the
IPs I allow him to 'see' in a network interface.

(I hope that my mail client isn't screwed up again and I've actually
replied to the maillist, and not started a new thread...)

- -- 
Best Regards,
Jakub Szafrański
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEbBAEBAgAGBQJPu2TyAAoJEMFTYabJw8eXj84H+MY9NU1jrEfvzvJOL+Kf8+A/
8l4XzN/qkmsDV2WuzwGByZNmeTSH89V3iVSic6mAL1agMnDuY1TV5rbslX/b+uNd
fwwbFW279OEsRhVXAFTT6i+8yGab47Zw28SoF+fTPvW+FarL2rCROrsYnI7qff0L
9kRJ4BD8taS1RFDZZj13nHuHWnQlApCib3NAEQumiWXILS9eNHLAs9lNV1P24baW
JWpz4spCYnN6jKjDPnN4PXERHMLYTvZy9DUl6x9GWcT7V4OL80z72ur/tomIXvZ6
UHYrBU72TkJCTMi8Nw7DV/NYeL3ACFWQN8lFO4cOB07mc3bJrdy4tylu/iFqlA==
=kdWX
-----END PGP SIGNATURE-----