diff --git a/auth.py b/auth.py index b91fbdb..7af0f22 100644 --- a/auth.py +++ b/auth.py @@ -213,6 +213,9 @@ def post_auth(data): # If proxified request if not nas_type: + if not user or not user["access"]: + logger.info("Proxified request: %s has no internet access" % (username)) + return radiusd.RLM_MODULE_REJECT logger.info("Proxified request, nas unknown") return radiusd.RLM_MODULE_OK