Koozali.org: home of the SME Server

limit internet access

Offline crazybob

  • *****
  • 894
  • +0/-0
    • Stalzer R&D
limit internet access
« on: February 08, 2004, 07:18:48 PM »
Hi,

I need to put a server in a small office enviroment. It will provide intenet access via dialup. I need to prevent some, but not all, users from accessing the internet. I have not decided on SME 5.6 or 6.0 yet. It will be based on how easy it is to impliment the restricting.

Any push in the right direction would be appreciated.

Thanks

Bob
If you think you know whats going on, you obviously have no idea whats going on!

Offline MasterSleepy

  • *
  • 386
  • +0/-0
    • http://www.vanhees.cc
limit internet access
« Reply #1 on: February 08, 2004, 10:02:31 PM »
Hi,

I write a contrib to do that using squid.
http://vanhees.homeip.net/modules.php?op=modload&name=Downloads&file=index&req=viewdownloaddetails&lid=136&ttitle=e-smith-squid-restrict-ip-0.1-1.noarch.rpm
It add a new panel in the server-manager and work as well with 5.6 and 6.0.

Regards,

Offline crazybob

  • *****
  • 894
  • +0/-0
    • Stalzer R&D
restrict
« Reply #2 on: February 08, 2004, 10:51:17 PM »
Thanks for the quick reply. Will give it a try

Bob :-D
If you think you know whats going on, you obviously have no idea whats going on!

mbachmann

limit internet access
« Reply #3 on: February 11, 2004, 08:59:21 AM »
It installs o.k. on a 6.0 box. I have not entered IPs yet.

Offline jmarcosm

  • ***
  • 59
  • +0/-0
limit internet access
« Reply #4 on: February 11, 2004, 07:11:49 PM »
Could you please give a brief howto of this contrib?
I have some questions: This only works if we setup the client browser with the proxy info?
We have to enter the allowed IPs, so the IPs not included will not have acces to the web?
Is this correct?

Thanks

Marcos Migliorini
...

chrsim

Easy way to restrict
« Reply #5 on: February 13, 2004, 10:28:21 AM »
Just do not give them the gateway ip

mbachmann

limit internet access
« Reply #6 on: February 16, 2004, 09:51:19 AM »
If you install the contrib from Master Sleepy via "rpm -Uvh e-smith-squid-restrict-ip-0.1-1.noarch.rpm" you'll see a panel in server manager wich reads "Squid allow ip". If you don't enter anything, every workstation is allowed to access i-net. (Because he is french, it reads a little strange). This is squid and the clients access the web through it: it only works if you use the proxy settings.

Anonymous

limit internet access
« Reply #7 on: February 17, 2004, 03:32:41 PM »
Thanks for the explanation! When you read "Squid allow IP", you MUST read "Squid deny IP"

Marcos