Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for FlashStart Pro Plus filtering #1102

Open
cotosso opened this issue Mar 2, 2025 · 0 comments
Open

Add support for FlashStart Pro Plus filtering #1102

cotosso opened this issue Mar 2, 2025 · 0 comments

Comments

@cotosso
Copy link
Contributor

cotosso commented Mar 2, 2025

Description
Enable support for the FlashStart Pro Plus filter, allowing the use of multiple profiles up to 5 different profiles. Profiles are assigned directly in the FlashStart panel based on firewall objects or users from a connected Active Directory (AD) server.

Why
The FlashStart Pro Plus filter provides advanced content filtering capabilities. Adding support for multiple profiles enhances flexibility, enabling administrators to apply different filtering policies based on network segmentation or user identity.

Proposed Solution

Extend dnsdist implementation to satisfy these new requirements.
Define multiple profiles on dnsdist, each one with 2 dedicated DNS servers.
Each profile is linked to a specific ipset or nftset which contains the IP addresses of the clients that use it.

  • Clients are dinamically assigned to their specific ipset/nfset exclusively within the FlashStart panel based on:
    • Firewall objects (host sets)
    • Users authenticated via an AD server

The default profile is for clients who have not been assigned to any specific profile.

@github-project-automation github-project-automation bot moved this to ToDo 🕐 in NethSecurity Mar 2, 2025
@cotosso cotosso added this to the NethSecurity 8.6 milestone Mar 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: ToDo 🕐
Development

No branches or pull requests

1 participant