Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: juncool on September 15, 2005, 12:20:57 PM

Title: Block Range of IP Addresses from Internet Access
Post by: juncool on September 15, 2005, 12:20:57 PM

Hello guys, I have installed sme server 6.01 as server and gateway in our campus. Could someone help me how to block certain ip addresses from accessing the Internet.

Thanks,

juncool  8-)

Title: Block Range of IP Addresses from Internet Access
Post by: funkusmunkus on September 15, 2005, 01:43:33 PM

this will probably do the trick
http://mirror.contribs.org/smeserver/contribs/index.php?subdir=aloveless%2Fcontribs%2Fipblock_inet&sortby=name
it say's it's still in beta, but I have tried it, and it does what it's meant to.
you could also try something like dansguardian
http://mirror.contribs.org/smeserver/contribs/rmitchell/smeserver/howto/dansguardian%20instal%20%26%20configure%20HOWTO%20for%20sme%20server.htm
dansguardian has more features.

hope that helps
cheers

Title: Block Range of IP Addresses from Internet Access
Post by: juncool on September 16, 2005, 09:04:13 AM

hi, it seems that ip block solution(tech-geeks.org) posted above doesn't work (client can still browse although i have blocked its ip address). i had previously installed squidguard filter controls for filtering web content,does this conflicts with the ip block internet solution provided by abeloveless? i have also installed dansguardian but i get lost during the configuration process. :-? do i have to set the proxy server setting in the client computers in order for the ip block and dansguardian to work?

im still newbie of sme server so pls. enlighten me.

- juncool

Title: Block Range of IP Addresses from Internet Access
Post by: raem on September 24, 2005, 02:06:23 PM

juncool

> i have also installed dansguardian but i get lost > during the configuration process

Do you expect us to guess where you get lost or are you going to tell/ask us ?

I suggest you configure
/etc/dansguardian/bannediplist        

see this extract from the original file

#IP addresses of client machines to
#disallow web access to
#
#Only put IP addresses here,
#not host names
#
#This is not the IP of web servers
#you want to filter.

#eg
#192.168.1.69
#192.168.0.2


> do i have to set the proxy server setting in the
> client computers in order for the ip block and
> dansguardian to work?

For dansguardian, configure the servers transproxy port to be 8080 and then configure the client browsers to auto detect the proxy server. They should then automatically use port 8080 and will be subject to dansguardian filtering.

Read the HOWTO carefully.

Title: Block Range of IP Addresses from Internet Access
Post by: juncool on September 26, 2005, 04:08:29 AM

Yes, I plan to have clean installation of SME 6.01 and repeat the process of configuring dansguardian but I am also looking forward to the custom ISO initiatives of ajkeane. It seems that everything necessary for my needs will be included in that ISO.

Thanks a lot guys and more power! :hammer: