Restricting USB mount and Internet access on a server
 

I maintain a Redhat Server for students. I need to restrict students mounting their USB device on the server and restrict internet access, while maintaining intranet access from the server.
Please if you can guide me to some links for steps of the same.

Thanks and Regards
Mayank Agarwal

Well USB certainly shouldn't a problem, as normal users don't even have permission to mount removable devices normally. Unless you are using HAL to do automounting, in which case you can just stop that service.

As for Internet access, would it be enough to remove all DNS servers from the system's configuration, and then address the server you wish them to view by IP? Granted this would still allow Internet access if the IP of the outside server was known.

Alternately, you could just filter access through iptables.

Hi,

If you don't want USB access you could just disable it in the BIOS. That's sure to make it tough.

As for the internet, I'd use iptables as MS3FGX sugested.

-eco