View previous topic :: View next topic |
Author |
Message |
uru
Joined: 03 Mar 2021 Posts: 3
|
Posted: Wed Mar 03, 2021 9:22 pm Post subject: ACL for USB Device |
|
|
Hello!
Is it to possible to implement ACL for USB Device/port.
Imagine, we have 3 USB tokens.
Token 1 - allowed to connect from computer 1 and computer 3 IPs
Token 2 - allowed to connect only from computer 2 IP
Token 3 - allowed to connect from any IP
Also, maybe it's possible to restrict visibility of USB device which is not allowed to connect from specific IP.
I believe such feature could be very convinient and good step forward in competition with other usb redirection solutions.
Best regards. |
|
Back to top |
|
 |
Peter Site Admin
Joined: 01 Aug 2007 Posts: 630
|
|
Back to top |
|
 |
uru
Joined: 03 Mar 2021 Posts: 3
|
Posted: Thu Mar 04, 2021 9:19 am Post subject: |
|
|
Wow amazing!
I purchased USB Redirector long time ago (USB Redirector for Linux v.3.2.2) and didn't checked for new versions since then, becourse it was already outstanding.
Is this feature also available in Linux USB Redirector ? |
|
Back to top |
|
 |
Peter Site Admin
Joined: 01 Aug 2007 Posts: 630
|
Posted: Thu Mar 04, 2021 9:35 am Post subject: |
|
|
Thanks for purchasing
Yes, there is preliminary ACL support in the latest version of USB Redirector for Linux.
The generic command-line format is as follows:
The <command> can be one of the following:
Code: | -list-acl <device>
-add-acl <rule> <device>
-add-acl <rule> <deviceid>
-add-acl <rule> "<device name>"
-remove-acl <deviceid>-<ruleid>
-remove-acl <rule>|all <device>
-remove-acl <rule>|all <deviceid>
-remove-acl <rule>|all "<device name>"
-set-acl-mode disabled|allow|deny <device>
-set-acl-mode disabled|allow|deny <deviceid>
-set-acl-mode disabled|allow|deny "<device name>" |
<device> specifies the device in the same way as with other commands, it can be a combination of the following parameters:
Code: | -vid <vendorid> Vendor ID of a USB device.
-pid <productid> Product ID of a USB device.
-usb-port <port> USB port number as displayed by USB Redirector.
-serial <serial> USB device serial number as displayed by USB Redirector.
-device-name "<name>" USB device name as displayed by USB Redirector. The name must be enclosed in double quotes. |
<rule> specifies the host name, computer name, IP address, IP range or IP subnetwork in a form of a string, e.g.:
Code: | 192.168.1.5
192.168.1.5-192.168.1.55
192.168.1.0/24
myhost.com
LUCY-WORKSTATION |
<rule> can also be a 1-based index of an existing rule specified as follows:
Examples:
usbsrv -set-acl-mode allow -vid 0123 -pid 4567
usbsrv -add-acl 192.168.1.5 -vid 0123 -pid 4567
usbsrv -add-acl 192.168.1.5 -serial 1234567890
usbsrv -add-acl 192.168.1.5 -usb-port 1-2
usbsrv -add-acl 192.168.1.5 -device-name "USB Flash Ddrive"
usbsrv -remove-acl 192.168.1.5 -vid 0123 -pid 4567
usbsrv -remove-acl -ruleid 1 -vid 0123 -pid 4567
usbsrv -remove-acl all -vid 0123 -pid 4567
usbsrv -list-acl 1
Hope it helps. |
|
Back to top |
|
 |
uru
Joined: 03 Mar 2021 Posts: 3
|
Posted: Thu Mar 04, 2021 6:13 pm Post subject: |
|
|
That's exaclty what i'm looking for.
Great job!
Thank you. |
|
Back to top |
|
 |
|