[NoCat] Pop-Up blockers

[Shawn Kondel]

We found this to be annoyance for our users that have some kind of pop-up blocker whether it be IE7, IE6 w/ XPSP2, FF, or 3rd party, so our solution for time being was to extend the renewal idle timeout to 24 hours (NoCat gateway daemon gets restarted at 1:00am daily by cron job) and take out the renewal popup html code from the login_ok.html file on NoCat authentication server.  In other words, the login user gets access to Internet all day without having to re-authenticate unless the user gets a different IP address later on.  This poses some problems when a new user gets the old user's IP address that has already been authenticated. (Temporary solution is the have a bigger DHCP dynamic IP address pool than the average login users.  DHCP server would give the users same IP address as long as possible and would not reallocated old IP address to another user unless all the new IP addresses from the pool are used up)

Another solution (which I am working on) is to modify the gateway source code to monitor packet activities from IPtables and if there any packet in-activities for number of defined minutes, flushed associated IP address from the IPtables chain.  The users would have to re-authenticate again if they tries to get back on again.

The problem I have now is how to deal with users that have browsers with proxy settings enabled.


Shawn
Utah State University IT

-----Original Message-----
From: nocat-bounces at lists.nocat.net [mailto:nocat-bounces at lists.nocat.net] On Behalf Of Eduardo Bejar
Sent: Thursday, October 18, 2007 10:15 PM
To: nocat at lists.nocat.net
Subject: [NoCat] Pop-Up blockers

Hi everyone,

I´ve been reading the mailing list archives and haven't found a definitive
answer about this issue. Regarding pop-up blockers, how are you handling
the NoCat pop-up window that opens after a user authenticates?

Have you found a way to load this window despite the use of pop-up
blockers, specially the one included in IE7?

Thanks and regards,

Edo




_______________________________________________
NoCat mailing list
NoCat at lists.nocat.net
http://lists.nocat.net/mailman/listinfo/nocat