LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 07-05-2007, 11:12 AM   #1
czy11421
LQ Newbie
 
Registered: Apr 2004
Posts: 28

Rep: Reputation: 15
control a computer's access of internet


My friend want to control his kid's access of internet . For example, just set up 6:00pm - 8:00pm, the internet access from his kid's computer will be through, the other time it will be closed.

And his kid's pc is windows. Free/open source software always comes first.

Any ideas ?
 
Old 07-05-2007, 11:33 AM   #2
emi_ramo
Member
 
Registered: Apr 2007
Location: Barcelona, Spain
Distribution: Debian, KUbuntu
Posts: 213

Rep: Reputation: 36
how is the intranet configured? is the father pc the gateway/firewall of all the intranet? if not, the only solution is to cut it from inside windoze itself... I don't remember so much this OS :P, but I think there were some option(s) to do so.

Last edited by emi_ramo; 07-05-2007 at 11:35 AM.
 
Old 07-05-2007, 11:36 AM   #3
theNbomr
LQ 5k Club
 
Registered: Aug 2005
Distribution: OpenSuse, Fedora, Redhat, Debian
Posts: 5,399
Blog Entries: 2

Rep: Reputation: 908Reputation: 908Reputation: 908Reputation: 908Reputation: 908Reputation: 908Reputation: 908Reputation: 908
Use a linux hosted netfilter/iptables firewall. Use cron on the firewall host to run a script that enables & disables access by the kid's computer on the desired schedule. Been there done that.
--- rod.
 
Old 07-05-2007, 12:09 PM   #4
michaelk
Moderator
 
Registered: Aug 2002
Posts: 25,703

Rep: Reputation: 5896Reputation: 5896Reputation: 5896Reputation: 5896Reputation: 5896Reputation: 5896Reputation: 5896Reputation: 5896Reputation: 5896Reputation: 5896Reputation: 5896
As stated depends on your hardware. Many of the newer versions of home routers like Linksys have a built in timer function to disable access I believe based on the MAC.
Assuming a router is being used have your friend check his manual for such a function.
 
Old 07-05-2007, 12:30 PM   #5
czy11421
LQ Newbie
 
Registered: Apr 2004
Posts: 28

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by theNbomr
Use a linux hosted netfilter/iptables firewall. Use cron on the firewall host to run a script that enables & disables access by the kid's computer on the desired schedule. Been there done that.
--- rod.
Do you mean this , using Linux as firewall, connecting windows PC to Linux sever which actually is router ?

But how to setup in Windows PC ?

any link is welcome.

Thanks.
 
Old 07-05-2007, 12:34 PM   #6
czy11421
LQ Newbie
 
Registered: Apr 2004
Posts: 28

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by emi_ramo
how is the intranet configured? is the father pc the gateway/firewall of all the intranet? if not, the only solution is to cut it from inside windoze itself... I don't remember so much this OS :P, but I think there were some option(s) to do so.
we have Linksys router box, to which windows PC connects. Firewall is in the linksys box. But we don't find time schedule function in that linksys router.

Thanks.

Last edited by czy11421; 07-05-2007 at 12:42 PM.
 
Old 07-05-2007, 12:58 PM   #7
framp
Member
 
Registered: Apr 2003
Location: Next to Stuttgart, Germany
Distribution: Debian, Mint, Raspbian
Posts: 131
Blog Entries: 5

Rep: Reputation: 27
If your windows boxes are connected directly to the internetrouter you have to install windows tools to restrict the internet access.

A much more elegant and LInux like solution would be to setup a Linux box as a router connected to the internet router and all the windows clients are connected to the Linux box (Your Linux box needs twi NICs). Then you could use either cron jobs to control internet access or if it's only web browsing you want to restrict install squid (proxy) on the Linux box and have all clients to use the proxy. Squid allows to define time slots on a client base.
 
Old 07-05-2007, 02:54 PM   #8
czy11421
LQ Newbie
 
Registered: Apr 2004
Posts: 28

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by framp
all the windows clients are connected to the Linux box (Your Linux box needs twi NICs).
one NIC connects to internet router, then how could multiple windows clients connect to another NIC ? need a switch ?

Thanks.
 
Old 07-05-2007, 03:04 PM   #9
framp
Member
 
Registered: Apr 2003
Location: Next to Stuttgart, Germany
Distribution: Debian, Mint, Raspbian
Posts: 131
Blog Entries: 5

Rep: Reputation: 27
Quote:
Originally Posted by czy11421
one NIC connects to internet router, then how could multiple windows clients connect to another NIC ? need a switch ?
Yes. Unfortunately.
 
Old 07-05-2007, 03:18 PM   #10
czy11421
LQ Newbie
 
Registered: Apr 2004
Posts: 28

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by framp
Yes. Unfortunately.
Got it. appreciate your reply.
 
Old 07-05-2007, 03:26 PM   #11
theNbomr
LQ 5k Club
 
Registered: Aug 2005
Distribution: OpenSuse, Fedora, Redhat, Debian
Posts: 5,399
Blog Entries: 2

Rep: Reputation: 908Reputation: 908Reputation: 908Reputation: 908Reputation: 908Reputation: 908Reputation: 908Reputation: 908
Quote:
Originally Posted by czy11421
Do you mean this , using Linux as firewall, connecting windows PC to Linux sever which actually is router ?

But how to setup in Windows PC ?

any link is welcome.

Thanks.
Yes, the Linux firewall host is a router that sits between the local LAN and the internet. It has two (or more) NICs: one connected to the internet side, and the othe(s) to the LAN side. It manages all traffic to and from the LAN. The hardware required to do this is minimal. I use a 233MHz K6 for the purpose. People are throwing these away all the time. There are a number of free packages available to configure the firewall that will work with almost any distribution; at least one I've used even boots from a floppy. It can run headless, if you want. You would have to use a switch or hub to connect multiple hosts on the LAN side, unless you populate the firewall/router with lots of NICs.

There is absolutely no configuration of the Windows (or any other OS) hosts required on the LAN side. The kid doesn't have any access to the firewall (assuming he doesn't get root password), so he can't circumvent the 'security'.

--- rod.
 
Old 07-05-2007, 03:29 PM   #12
theNbomr
LQ 5k Club
 
Registered: Aug 2005
Distribution: OpenSuse, Fedora, Redhat, Debian
Posts: 5,399
Blog Entries: 2

Rep: Reputation: 908Reputation: 908Reputation: 908Reputation: 908Reputation: 908Reputation: 908Reputation: 908Reputation: 908
Quote:
There is absolutely no configuration of the Windows (or any other OS) hosts required on the LAN side. The kid doesn't have any access to the firewall (assuming he doesn't get root password), so he can't circumvent the 'security'.
Actually, unless you also run a DHCP server on the router (I recommend this), you may have to assign a fixed private IP to the LAN hosts. This would be a one-time-only change.
--- rod.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
internet access control janniez Linux - General 2 05-01-2007 12:45 PM
internet access control janniez Linux - General 2 05-01-2007 01:25 AM
access control in IPcop BillyB Linux - Networking 0 02-26-2005 09:06 AM
Squid Access Control acompw Linux - Software 2 09-02-2004 07:42 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 01:10 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration