Koozali.org: home of the SME Server

Legacy Forums => Suggestions => Topic started by: Martin Farsoe on September 06, 2001, 11:53:17 PM

Title: IP adress blocking
Post by: Martin Farsoe on September 06, 2001, 11:53:17 PM

Will there be a utility, so that you can block for surtain IP adresses ??

I want to block for programs like napster and kazaa, so that they cannot use all of our bandwith, because of download of MP3 and movies ??

Some kind of IP lockout ??

Title: Re: IP adress blocking
Post by: Ronald Tanis on September 07, 2001, 06:36:48 PM

you can try Squidguard
http://www.netsourced.com/servers/docs/squidguard-howto.html
success

rmtMartin Farsoe wrote:
>
> Will there be a utility, so that you can block for surtain IP
> adresses ??
>
> I want to block for programs like napster and kazaa, so that
> they cannot use all of our bandwith, because of download of
> MP3 and movies ??
>
> Some kind of IP lockout ??

Title: Re: IP adress blocking
Post by: Martin Farsoe on September 07, 2001, 10:48:09 PM

Yes, but what if i do not have squid running, and only is running as gateway/firewall ?

I am not running any kind of proxy, on my e-smith server.

Title: Re: IP adress blocking
Post by: Craig Foster on October 14, 2001, 09:05:27 PM

At the moment, you can add specific addresses to be blocked by editing the templates for /etc/rc.d/init.d/masq

I use that for stopping masq'ed kazaa and audio galaxy stuff.

Regards,

Craig Foster

Title: Re: IP adress blocking
Post by: Patrick B on November 13, 2001, 04:49:11 PM

Craig,

Could you be more specific with your setup for blocking specific IP addresses in the /etc/rc.d/init.d/masq file?

I'm running transproxy, so I don't know if that makes a difference here.  I'm hoping that transproxy will catch and force ALL Internet bound traffic to run through my SME server so that I can control it.

I may end up installing squidguard or Dan's Guardian, but I really only want to block a few unruly users from certain sites, so I may not need those programs for this.

Any ideas/tips/thoughts would be appreaciated, thanks.

Patrick