by adrien » Jan 25 07 12:17 am
WinGate 2007 which we are working on the beta of, will do this. It's majorly overhauling the policy framework (but don't worry about existing legacy policy config, it should still work as a special case of the more generalised policy framework).
main new features are the ability to control order and sequence of evaluation of policy, specifying for each recipient what happens
* when a filter is matched
* when a filter is not matched.
for a match case or non-match case you can specify:
* return grant
* return denied
* return divert request to somewhere else
* continue processing policy
* break
* jump to named policy element and continue from there.
So this will allow a much simplified structuring and maintenance of policies, in a multi-layered approach, and provide ability to custom respond to matches or mismatches on specific policy elements.
I'm writing a paper on it at the moment... that's not even the really exciting new policy stuff!!!!
Adrien