Well, the anwer's allready been received through Astaro support, but Im not giving up....yet......
Looking through webadmin, one can create packet-rules which Source IS a group based on backend-membership (like AD or Edir). But according to support, that's not going to work.
Since standard practice is to user DHCP for the clients, it's difficult to solve IF we need a rule saying "users/group=*** be able to do this/that" but not the other users. Only way to achieve this is with static IP's/Groups.
Shouldn't this be something for an enhancement request ?
Since backend-membership actually DO work for Surfprotection, the majority of work has allready been done.... And, it IS in fact possible to create the rule based on the exemple above allready today, though it's stated not to work.
This thread was automatically locked due to age.
