LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices

Reply
 
Search this Thread
Old 12-01-2005, 10:43 PM   #1
fieldyweb
Member
 
Registered: Jun 2005
Location: Wycombe, England
Distribution: Mepis 3.4.3 , Ubuntu & Damm Small Linux
Posts: 119

Rep: Reputation: 15
Blocking access to specific Websites and IP Ports


I am asking this to clarify what i need to use a firewall or a proxy server (squid)

I have an ICT Lab which has young students accessing the internet, the server they logon to is a FC4 box running Samba 3.0

We have just installed broadband internet, and currently the students have unlimited internet access with no security at all other than the firewall on the broadband router..

I would like the following...

1) Students have basic internet access
2) students cannot access porn websites
3) students cannot use MSN (blocking th port number)
4) students cannot download and install software.

I would like this on a class by class basis, currently each students login id is grouped by thier class

Which parts do i need to setup on a firewall?
Which parts would i a proxy such as squid for?

And i know this is a Linux forum, in XP if i setup the proxy servers under internet options would firefox pickup these settings?

I think i know the answer to most of the above, i've got a stinking cold and would like some clarification until this bottle of cough mixture wears off.. Thanks.
 
Old 12-02-2005, 04:58 AM   #2
Oliv'
Senior Member
 
Registered: Jan 2004
Location: Montpellier (France)
Distribution: Gentoo
Posts: 1,014

Rep: Reputation: 36
Hi,

Quote:
Which parts do i need to setup on a firewall?
part 3
Quote:
Which parts would i a proxy such as squid for?
part2 and 4... Note that for part2 you'll probably have to install squidguard else it will quickly become impossible to manage an ACL list...
Quote:
And i know this is a Linux forum, in XP if i setup the proxy servers under internet options would firefox pickup these settings?
yes... and if you don't want to modify such settings, do a transparent proxy

Oliv'
 
Old 12-02-2005, 05:22 AM   #3
prabuayyappan
Member
 
Registered: Sep 2005
Location: Coimbatore
Distribution: Prabuayyappan
Posts: 32

Rep: Reputation: 15
you can block and limit them by squid acls...have a look on squid acls

http://www.squid-cache.org/Doc/FAQ/FAQ-10.html
 
Old 12-02-2005, 05:32 AM   #4
fouldsy
Senior Member
 
Registered: Jan 2002
Location: St Louis, MO
Distribution: Ubuntu
Posts: 1,284

Rep: Reputation: 47
On top of Squid and the suggestions provided by others as to how to configure this so it behaves without user intervention, you also might want to look at DansGuardian. This provides content filtering alongside squid, so rather than having to manually use ACL's within squid, or setup reg-ex settings in Squid, DansGuardian lets you specify links in a text file and automatically block sites based on massive lists of keywords.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
blocking specific websites, but allowing internet access poiuytrewq Linux - General 6 08-31-2006 11:45 PM
Blocking Specific Programs from Network Access? Trip in VA Linux - Newbie 23 08-06-2006 02:47 PM
Allowing access only to specific websites? matux Linux - Security 2 11-28-2005 09:18 PM
Allowing specific programs access to needed ports The MCP Linux - Security 5 03-31-2005 05:21 PM
Blocking ports for a specific IP Shrimpy Linux - Networking 1 12-23-2002 11:48 AM


All times are GMT -5. The time now is 04:12 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration