LinuxQuestions.org
Latest LQ Deal: Complete CCNA, CCNP & Red Hat Certification Training Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 01-09-2012, 04:06 PM   #1
John Simard
LQ Newbie
 
Registered: Jan 2012
Posts: 2

Rep: Reputation: Disabled
Restrictions on download for Internet cafe users


Hi all. I'm new here. My name is John and i would like to ask a question.
I have installed a new Ubuntu 11.10 for a friend of mine who owns an Internet cafe. I have set up the "client" account but now i must restrict downloads for the clients at the cafe. The owner of that cafe doesn't want people to download anything on the web. Just browse and watch online videos like on youtube.
I am fairly new to linux and i would like to know how to proceed. If anyone could help, i would really appreciate it.

Thanks in advance

John
 
Old 01-10-2012, 03:04 AM   #2
mulyadi.santosa
Member
 
Registered: Sep 2011
Posts: 96

Rep: Reputation: 15
Hi John

The task you're going to tackle is a bit confusing See, the owner wanna forbid download, but allow browsing. The thing is, download is sometimes done using HTTP protocol. This is exactly the same protocol you use for browsing. So, you see the trouble, right?

But, at least you prevent the "other protocol" to get into action like FTP, bitTorrent etc. So, maybe the idea is putting something like these iptables rules in the internet cafe gateway/firewall/proxy:
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -p tcp --sport 80 -j ACCEPT
iptables -A INPUT -j REJECT

iptables -A OUTPUT -p tcp --dport 80 -j ACCEPT
iptables -A OUTPUT -j REJECT

Those rules above means just allow connection to port 80 (HTTP), then drop the rest. Of course, you need to adjust it according to your real situation i.e adjust on which interface that faces the WAN and which one faces the LAN etc

Hope it helps...
 
1 members found this post helpful.
Old 01-10-2012, 07:40 AM   #3
John Simard
LQ Newbie
 
Registered: Jan 2012
Posts: 2

Original Poster
Rep: Reputation: Disabled
It worked! thanks so much!!!
JS
 
Old 01-10-2012, 12:54 PM   #4
mulyadi.santosa
Member
 
Registered: Sep 2011
Posts: 96

Rep: Reputation: 15
Hi John

You welcome, glad if I can help

PS: Care to give reputation point to me?
 
1 members found this post helpful.
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] IPsec - tunnel restrictions and users lucorlis Linux - Networking 1 06-22-2011 02:47 PM
Internet Cafe: Management on XP, users on Linux timthecamel General 4 04-09-2008 01:28 PM
Users restrictions bebleu Linux - Security 2 07-05-2007 04:23 PM
internet cafe with debian slashams Debian 1 09-30-2006 04:55 AM
LXer: Linux Internet Cafe Software Allows Multiple Users To Share Single ... LXer Syndicated Linux News 0 09-24-2006 10:54 PM


All times are GMT -5. The time now is 01:09 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration