Blocking access to specific Websites and IP Ports
 

I am asking this to clarify what i need to use a firewall or a proxy server (squid)

I have an ICT Lab which has young students accessing the internet, the server they logon to is a FC4 box running Samba 3.0

We have just installed broadband internet, and currently the students have unlimited internet access with no security at all other than the firewall on the broadband router..

I would like the following...

1) Students have basic internet access
2) students cannot access porn websites
3) students cannot use MSN (blocking th port number)
4) students cannot download and install software.

I would like this on a class by class basis, currently each students login id is grouped by thier class

Which parts do i need to setup on a firewall?
Which parts would i a proxy such as squid for?

And i know this is a Linux forum, in XP if i setup the proxy servers under internet options would firefox pickup these settings?

I think i know the answer to most of the above, i've got a stinking cold and would like some clarification until this bottle of cough mixture wears off.. Thanks.

Hi,

part 3
part2 and 4... Note that for part2 you'll probably have to install squidguard else it will quickly become impossible to manage an ACL list...
yes... and if you don't want to modify such settings, do a transparent proxy ;)

Oliv'

you can block and limit them by squid acls...have a look on squid acls

http://www.squid-cache.org/Doc/FAQ/FAQ-10.html

On top of Squid and the suggestions provided by others as to how to configure this so it behaves without user intervention, you also might want to look at DansGuardian. This provides content filtering alongside squid, so rather than having to manually use ACL's within squid, or setup reg-ex settings in Squid, DansGuardian lets you specify links in a text file and automatically block sites based on massive lists of keywords.