Block services from backend without using "start/stop" commands

[Vharry]

Hii,

Is there any way to restrict a specific user from using a specific service (eg. FreeRadius) from the backend? I created a php script with "start/stop", it is a working command but I am not sure if this is the right way to achieve the desired goal of preventing a user from using a specific service.

What are the possible ways to achieve this in the right way?

[bartjsmit]

Does your script sever TCP connections? OPNsense is stateful, which allows established TCP sessions to pass without checking them against policy.

You may be quicker to restrict the user on the service itself. I.e. block them in the RADIUS layer. This will also have a more global effect on other services that use FreeRadius for SSO

Bart...