Re: Restricting Internet Access

2009-11-07 Thread David Baron
On Sunday 18 October 2009 18:41:09 David Baron wrote: > As undemocratic at it seems, sometimes it is necessary from some logins not > to be able to access internet browsing and such. > > How might one set this up? > The following command was suggested on a site sporting a similar thread: iptabl

Re: Restricting Internet Access

2009-10-28 Thread Celejar
On Wed, 28 Oct 2009 07:21:13 -0500 "Boyd Stephen Smith Jr." wrote: ... > I disagree on the last point. It could simply be an incompatibility > between Shorewall and I. I find the RAW iptables rules clear and > rational, I don't see the need to obfuscate them. Fair enough - to each his own, I

Re: Restricting Internet Access

2009-10-28 Thread AG
David Baron wrote: As undemocratic at it seems, sometimes it is necessary from some logins not to be able to access internet browsing and such. How might one set this up? I'm venturing a way out of my comfort zone here, but is this not a service that can be disabled via the various groups

Re: Restricting Internet Access

2009-10-28 Thread Boyd Stephen Smith Jr.
In <20091028011429.38cb199f.cele...@gmail.com>, Celejar wrote: >On Tue, 27 Oct 2009 16:09:11 -0500 >"Boyd Stephen Smith Jr." wrote: >> I can't help you with guarddog. I write my iptables rules by hand so >> they remain understandable. I can't stand the trash that most >> iptables rules generator

Re: Restricting Internet Access

2009-10-27 Thread Celejar
On Tue, 27 Oct 2009 16:09:11 -0500 "Boyd Stephen Smith Jr." wrote: ... > I can't help you with guarddog. I write my iptables rules by hand so > they remain understandable. I can't stand the trash that most > iptables rules generators produce. (Shorewall, I'm looking at you.) Can you elaborat

Re: Restricting Internet Access (repost)

2009-10-27 Thread Celejar
On Tue, 27 Oct 2009 15:29:18 +0200 David Baron wrote: > As undemocratic at it seems, sometimes it is necessary from some > logins not to be able to access internet browsing and such. > > How might one set this up? I responded to you at the time: http://lists.debian.org/debian-user/2009/10/msg0

Re: Restricting Internet Access

2009-10-27 Thread Todd A. Jacobs
On Tue, Oct 27, 2009 at 09:52:42PM +0200, David Baron wrote: > Iptables is "configured" at boot time, but this is not where it gets I don't think iptables is really your answer, by itself. What you're really trying to do most likely requires you to set up an authenticating proxy server on a separ

Re: Restricting Internet Access

2009-10-27 Thread Boyd Stephen Smith Jr.
On Tuesday 27 October 2009 14:52:42 David Baron wrote: > On Sunday 18 October 2009 18:41:09 David Baron wrote: > > As undemocratic at it seems, sometimes it is necessary from some logins > > not to be able to access internet browsing and such. > > > > How might one set this up? > > The suggestion w

Re: Restricting Internet Access

2009-10-27 Thread David Baron
On Sunday 18 October 2009 18:41:09 David Baron wrote: > As undemocratic at it seems, sometimes it is necessary from some logins not > to be able to access internet browsing and such. > > How might one set this up? > The suggestion was made to use iptables, gui-owner --> drop. Iptables is "confi

Re: Restricting Internet Access (repost)

2009-10-27 Thread Boyd Stephen Smith Jr.
In <200910271529.18518.d_ba...@012.net.il>, David Baron wrote: >As undemocratic at it seems, sometimes it is necessary from some logins not > to be able to access internet browsing and such. man 8 iptables Look at the owner match. -- Boyd Stephen Smith Jr. ,= ,-_-. =. b...@igua

Restricting Internet Access (repost)

2009-10-27 Thread David Baron
As undemocratic at it seems, sometimes it is necessary from some logins not to be able to access internet browsing and such. How might one set this up? -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.or

Re: Restricting Internet Access

2009-10-18 Thread Celejar
On Sun, 18 Oct 2009 18:41:09 +0200 David Baron wrote: > As undemocratic at it seems, sometimes it is necessary from some > logins not to be able to access internet browsing and such. > > How might one set this up? One method might be to force all traffic through a proxy, and require authenticat

Restricting Internet Access

2009-10-18 Thread David Baron
As undemocratic at it seems, sometimes it is necessary from some logins not to be able to access internet browsing and such. How might one set this up? -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.or

Re: restricting internet access for some users

2007-03-11 Thread Franck Joncourt
On Sun, Mar 11, 2007 at 04:07:54PM -0400, H.S. wrote: > > Hello, > > On a computer connected to a router, which in turn is connected to the > internet (more or less constantly), how do I restrict some users from > accessing the internet. > > The lan is actually in a small community office. A c

Re: restricting internet access for some users

2007-03-11 Thread Roberto C. Sanchez
On Sun, Mar 11, 2007 at 04:07:54PM -0400, H.S. wrote: > > Hello, > > On a computer connected to a router, which in turn is connected to the > internet (more or less constantly), how do I restrict some users from > accessing the internet. > > The lan is actually in a small community office. A c

restricting internet access for some users

2007-03-11 Thread H.S.
Hello, On a computer connected to a router, which in turn is connected to the internet (more or less constantly), how do I restrict some users from accessing the internet. The lan is actually in a small community office. A couple of computers are for the staff, but a third is set aside for