LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 08-15-2004, 04:23 PM   #1
namin
LQ Newbie
 
Registered: Aug 2004
Distribution: Gentoo, kernel-2.6.7-gentoo-r14
Posts: 3

Rep: Reputation: 0
network access control with transparent proxy server


I posted the same question in linux newbie, but read over some of the other questions and realized that this doesn't quite fit there quite as well as I had first thought.

I'm running gentoo.
I've installed squid and shorewall, and have a pretty good idea as to how shorewall works and how to set it up. Squid...I'm still figuring out.

I was wondering if maybe someone has a suggestion as to a better way of attacking my problem. I want one computer to act as the router, firewall, etc. Then, when anyone connects to the network with their computer, and open up a browser window, I want to redirect whatever they do to my internal website which will ask them for special credentials. Then after that, if successful, I want them to be able to search whatever websites and do whatever they want.

------------
internet |
------------
|
|
-------------------------------
router/firewall/dhcp/apache/etc |
-------------------------------
|
|
-----------------------------
switch or hub |
-----------------------------
|
|
-----------------------------
random connections |
from other computers |
-----------------------------

In shorewall, I see you can to mac filtering for whitelists, but I didn't see a way to do this dynamically. Also, when a mac isn't found in a list, I can only reject or drop the request, I can't tell it to redirect....or can I? I hope someone can help me figure this out...i've been beating my head against the wall for hours now

Thanks.
-Nimesh
 
Old 08-16-2004, 02:11 PM   #2
zatriz
Member
 
Registered: Aug 2003
Location: Seattle, Wa
Distribution: Fedora,Trustix,Debian
Posts: 290

Rep: Reputation: 30
You have the right idea but i think that a better way to accomplish what you are wanting to do is use shorewall+squid+squidguard.
shorewall will act as the firewall
squid as a caching proxy and authenication server
squidguard for filtering and redirection.
squidguard can be easily intergrated into squid
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Can't make proxy server transparent scjvsTP Linux - Networking 2 11-29-2005 12:10 PM
Doesn't the transparent proxy keep an access log??? tzouse Linux - Networking 7 08-10-2005 03:45 PM
Programming a Transparent Proxy Server jayanth Programming 3 05-06-2005 04:28 PM
transparent squid proxy server alvi2 Linux - Networking 4 02-24-2005 01:18 PM
network access control with transparent proxy server namin Linux - Newbie 1 08-15-2004 05:51 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 12:55 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration