LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 09-02-2003, 10:45 PM   #1
TongueTied
Member
 
Registered: Aug 2003
Distribution: SuSE 8.1 pro
Posts: 94

Rep: Reputation: 15
Question Looking for web filter for linux server?


I have a problem and I would appreciate your suggestions on how best to solve this. I have a broadband connection to my SuSE 8.1 Linux server. All the client machines on my network are either win2k or winxp. The problem I have is that each client machine has full web and email access masquerading via the linux box. So, a number of employees are spending more time sending email and surfing the web instead of working. I have made them all sign a contract that states that they mustnít surf or send personal email during company time. This worked for a while but has again deteriorated.

What I would like to do is to set up a net filter that works on a schedule so that I can stop employees visiting specified sites (yahoo mail and hotmail) during office hours. I would prefer this to blocking the sites at all times. Someone suggested that I set up squid but I donít see any way for squid to filter addresses let alone based on a schedule.

For email, I would like to set up a scheduled retrieval and send for some of the employees. Will sendmail and fetchmail suffice?

I would appreciate your suggestions short of firing the employees. When I can get them working, they are very good but lack self control when it cones to the internet.
 
Old 09-02-2003, 11:14 PM   #2
fsbooks
Member
 
Registered: Jan 2002
Location: Missoula. Montana, USA
Distribution: Slackware (various)
Posts: 458

Rep: Reputation: 42
Productivity goes up if employees are allowed to surf the web and use personal email from work. Keep your employees happy and they will do much better at making you rich. That is what you want is it not? But they ARE NOT your slaves.

Oh, give them linux boxes. too. That will help too.

Last edited by fsbooks; 09-02-2003 at 11:18 PM.
 
Old 09-02-2003, 11:48 PM   #3
TongueTied
Member
 
Registered: Aug 2003
Distribution: SuSE 8.1 pro
Posts: 94

Original Poster
Rep: Reputation: 15
I fully agree that happy employees are productive employees, that is why I want to restrict access only to specified sites for set periods of time. I donít want to stop them accessing those sites during lunch, before or after work.

The problem is not the casual use of the web or the occasional personal email. The problem is the employees that spend 7 hours a day writing emails and 1 hour working. I have two employees that I get about one full days work a week from. They are not making me rich, in fact, I probably make less than you. I agree that employees are not my slaves and I donít treat them as slaves. However, I hired them and clearly laid out the expectations. Some (not all) employees are now abusing the freedoms they were given. The assumption that all employers are evil slave drivers is wrong and narrow minded. I have made a significant investment in my company and I have employees that WANT to work for me. I give employees all the freedom they desire with the expectation that the freedom given to them will be returned in the effort them give to me. For most employees this seems to work, treat employees like valuable people and they will put in the effort for you. However, the temptation of the internet on their desktop is sometimes too much and a few employees seem unable to restrain themselves. They are good employees and I donít want to have to fire them over something like this. The idea is to provide more structure for those individuals that need it and for those that donít, are free to discipline themselves.

I would appreciate responses that can help me find a solution that will work technically and communally. I donít want to have to resort to firing as a means of controlling internet use. My employees are too valuable a resource for that.
 
Old 09-03-2003, 12:55 AM   #4
vickp
LQ Newbie
 
Registered: Aug 2003
Distribution: slackware
Posts: 8

Rep: Reputation: 0
At home I use squid with the dansguardian plugin. "Dan's Guardian" is a Squid plugin for filtering sites with 'offensive' content. The filtering is done via user-defined filtering algorithms and configurable stop lists (as opposed to $$$ subscription based filters, etc). I use it on our family internet connection to help keep my kids from stumbling across the really gross stuff.

I'm not sure about the time variable capability that you want. Perhaps if you created two sets of dansguardian configuration files, then had a cron job that fired off a script that stopped-swapped configuration files-restarted the filter.
 
Old 09-03-2003, 06:55 AM   #5
abd_bela
Member
 
Registered: Dec 2002
Location: algeria
Distribution: redhat 7.3, debian lenny
Posts: 623

Rep: Reputation: 31
Do you use samba to connect the Win$ to your server?
with samba you can limit the access or plan the access combining that with crond.

best regards
 
Old 09-07-2003, 11:35 PM   #6
TongueTied
Member
 
Registered: Aug 2003
Distribution: SuSE 8.1 pro
Posts: 94

Original Poster
Rep: Reputation: 15
Solution found! Thank you.

I looked at danís guardian but ended up trying SquidGuard first but the suggestion pointed me in the right direction. It was a bit tricky to configure but now it seems to be working and today is the first day that it is in operation company wide. So far, no complaints. Actually, I received a few thanks for instituting the porn blocking.

To get Squidguard configured, it is possible to edit the .conf file manually but it seems rather finicky and I ended up installing the webmin module for squidguard. The webmin module will let you setup a basic filter. Once you have the basic filter set up with webmin, you can then edit the files manually and add in the more complex configurations you are looking for.

Thanks for the assistance. I now have to set up sendmail and fetchmail appropriately.
 
Old 09-09-2003, 02:40 PM   #7
eponti01
LQ Newbie
 
Registered: Apr 2003
Location: Nigeria
Distribution: redhat8.0
Posts: 2

Rep: Reputation: 0
While we are here I have a similar problem, linux machine (RH 9.0) as a socks server and win$ clients (about 400); I have to be able to grant access to the web just to some users connecting from their boxes.
Which program can I use (o better which program is the easiest to configure) and how to do it.
I am running RH9
Thanks in advance for any tip...
....
 
Old 05-21-2008, 07:10 PM   #8
fjordlander
LQ Newbie
 
Registered: Mar 2007
Posts: 2

Rep: Reputation: 0
Smile

Quote:
Originally Posted by eponti01 View Post
While we are here I have a similar problem, linux machine (RH 9.0) as a socks server and win$ clients (about 400); I have to be able to grant access to the web just to some users connecting from their boxes.
Which program can I use (o better which program is the easiest to configure) and how to do it.
I am running RH9
Thanks in advance for any tip...
....
Hi there,

You have a couple of choices. You can install squid and set ACLs to allow access only only for specified IP addresses (and give those users fixed addresses) or possibly MAC addresses? Someone else may be able to advise if you can use MAC addresses with Squid ACLs. Alternatively (and more simply, you set squid up to use either local authentication or windows authentication.
 
Old 05-21-2008, 09:00 PM   #9
chrism01
LQ Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Centos 6.10, Centos 7.5
Posts: 17,707

Rep: Reputation: 2497Reputation: 2497Reputation: 2497Reputation: 2497Reputation: 2497Reputation: 2497Reputation: 2497Reputation: 2497Reputation: 2497Reputation: 2497Reputation: 2497
Just FYI, if that really is RH9 and not RH Fedora 9, its ancient and hasn't been updated in years ie its wide open to exploits... recommend you upgrade eg Fedora or Centos (free version of RHEL)
 
Old 05-21-2008, 09:30 PM   #10
farslayer
LQ Guru
 
Registered: Oct 2005
Location: Northeast Ohio
Distribution: linuxdebian
Posts: 7,247
Blog Entries: 5

Rep: Reputation: 191Reputation: 191
That is RH 9 not Fedora because this thread is 5 years OLD.. I would hope the OP solved the issue by now...

fjordlander welcome to LQ. You might want to consider viewing the posting date in a thread before responding. !!
 
Old 07-03-2008, 02:41 PM   #11
tiger73
LQ Newbie
 
Registered: Jul 2008
Posts: 1

Rep: Reputation: 0
have you tried censornet?
there is a free version as well as paid for version. Just google for 'censornet'. Both run on Debian Linux and you can use it for controlling who has access to the Web and what level. also you can schedule for different times of the day.
 
Old 07-03-2008, 03:40 PM   #12
Ricio
Member
 
Registered: Sep 2003
Location: Colombia
Distribution: Debian
Posts: 220

Rep: Reputation: 30
Instead of doing such privation of personal services in office hours, set weekly goals or something like that, whoever does not do em, or meets the goals but very mediocre, you can fire them because they were not productive...

Because it is true... a happy worker is a productive worker... no worker is going to want to read their emails at lunch, cuz then theyll have to eat in front of the computer... and that could lead to disaster! Just my two cents
 
Old 07-03-2008, 04:42 PM   #13
farslayer
LQ Guru
 
Registered: Oct 2005
Location: Northeast Ohio
Distribution: linuxdebian
Posts: 7,247
Blog Entries: 5

Rep: Reputation: 191Reputation: 191
HELLO 5 year old Thread !!!! .. Let it DIE a peaceful death...

I think I'm experiencing Deja-Vu
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
I want to Create a web firewall and filter Nauntilus Linux - Networking 4 11-05-2005 10:51 PM
can we configure a Linux server with mail server,file server and web server kumarx Linux - Newbie 5 09-09-2004 07:21 AM
create a spam & antivirus linux filter for Exchange Server balki Linux - Software 1 09-01-2004 05:26 PM
Can't access Linux web server web pages from LAN client jaydave Linux - Networking 4 03-16-2003 03:38 AM
web email filter johnpayback Linux - Software 2 08-20-2002 12:24 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 05:30 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration