[clue-tech] port access protocol restriction?

[David Anselmi]

Jim Ockers wrote:
[...]
> Just kidding.  The business request is to "restrict internet access" to
> "e-mail only" unless the customer is paying us for internet access.  This
> is for expensive satellite links and it's even more expensive for us if
> the satellite users are browsing the web or doing other high-bandwidth 
> activity.

I see.  Like I said, I can imagine cases where egress filtering is 
useful.  This sounds like one of them, but only because the filtering 
pays for the time to administer it.

This project you're on raises so many interesting questions that you 
ought to do a CLUE talk on it--all the odd problems you have to solve 
and how Linux is flexible enough to solve them for you.  IIRC you're out 
of area now, but if you wind up back this way bring a presentation with 
you.  (We buy the beer, remember?)

Dave