User account group as Alias



  • Hi. Is it possible to use a user account group as an Alias?
    I'm using a Captive Portal and there are currently 2 classes of users: "Members (valid account users)" and "Guests (voucher users)"

    Member advantage - permanent access
    Guest advantage - less restrictions

    Given that "members" are employees, I wan't to limit their browsing freedom via firewall.
    Is there a way to group them as an alias BY USER ACCOUNT, not by their addresses so they can switch devices and still get the same restrictions?

    I know you can group user accounts but it looks like I can only use it for setting their privileges, not as aliases for firewall rules. Thanks.



  • In short, you can't apply firewall restrictions to user accounts within the firewall rules themselves. Your best bet would be to install Squid/Squidguard/Dansguardian and set your user-based restrictions that way. If you're using a Windows environment, it's possible to bind Squid to Active Directory and apply filters according to Windows-defined access groups. Google is your friend of course, but here's a link which may get you started.

    https://forum.pfsense.org/index.php?topic=58700.0