Koozali.org: home of the SME Server

Restricting internet access

Mark Robinson

Restricting internet access
« on: April 10, 2001, 12:39:12 AM »
Does anyone know if there is a way to limit peoples internet access so that certain people ( depending on their user name and password or IP address) will only have access to certain specified sites. I'm wondering if it would be possible to do this with some configuring to the "rules" in IPCHAINS, or with SquidGuard the access controller for Squid.

Can anyone help me, give me hints or had any experience with IPCHAINS or SquidGuard.

Thanks

Mark

Fran Boon

Re: Restricting internet access
« Reply #1 on: April 16, 2001, 02:21:29 PM »
IPChains can allow you to restrict general Internet access by IP.
The config file for this is:
/etc/rc.d/init.d/masq

Restricting access to websites will involve 2 things:
(1) Forcing all web-access to go via the proxy using Charlie Brady's contrib module: e-smith-transproxy
(2) Using Access Controls in Squid.
This can be done by either:
(a) Creating a custom template for squid.conf in:
/etc/e-smith/templates-custom/etc/squid.conf
(b) Using SquidGuard. There is a contrib HowTo from Darrel May:
http://netsourced.com/e-smith/howto/howto-squidguard.html

If you want to restrict access based on user authentication, then Tim Litwiller is working on a HowTo here:
http://linux.made-to-order.net/article.php

Good Luck!
Fran.