Playing with a webversion of authpf.

[raymond@dyn.org]

Hi there,

for a project I'm working on a NPH webversion of authpf, based heavily on the
code of authpf. It is supposed to be the open source counterpart for Cisco Pix
and Nokia FW1 userbased rulesets which uses HTTP for authentication (I want to
use HTTPS ofcourse).

I'm running into some small problems though and maybe you can help me.


What's going okay:

nph-authpf can recognize source IP and username based on CGI parameters.
It will load the rules in an anchor

What's not okay:

The rules are not activated, whereas the rules do work when it's used by authpf.

Here are the results:

No authpf's.

pfctl -s Anchor
0 anchors:

Activated nph-authpf

pfctl -s Anchor
1 anchors:
  nph-authpf
pfctl -a nph-auth -s rules
block drop in quick inet from 172.16.1.42 to any

But this rule does not work in nph-authpf and does in authpf.

Sourcecode will be sent on request since I don't want to blog the mailinglist.


Thank you,


Raymond.