Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: edlentz on January 09, 2006, 08:31:35 PM

Title: Can I restrict a users access to the Internet?
Post by: edlentz on January 09, 2006, 08:31:35 PM

I haven't yet found the answer to this.  I want to restrict a computer from using the internet during certain hours of the day.  I would be using SME as the DHCP, and PPPoE client to my ISP.  Can this be done thru a Mod on the SME server?  I think I can do it thru my Linksys router but I want to use my SME box to do it, if it is possible.  I would like to get rid of the linky.

Thanks

Ed

Title: Can I restrict a users access to the Internet?
Post by: rick1908 on January 11, 2006, 02:43:43 AM

Dansgardian should do the trick....

...I have it installed using dungog.net's implimentation of it.


It seems to work quite well and has alot of flexibility.

Here is the link:

http://www.dungog.net/sme/

This should be a good start anyhow.

Good luck.

Title: Can I restrict a users access to the Internet?
Post by: edlentz on January 11, 2006, 04:10:16 AM

Thanks Rick,

That is a step in the right direction, but I am looking for a way to restrict a single machine or maybe several machines on my network.  Not all at once but select ones.

Thanks again

Title: Can I restrict a users access to the Internet?
Post by: rick1908 on January 11, 2006, 04:26:10 AM

Not sure but the configuration appears that I can let everything go through except restricted ip addresses. That appears to be one of many ways you can ste it up.

I have not tried it myself, so I can not confirm.

Title: Can I restrict a users access to the Internet?
Post by: edlentz on January 11, 2006, 05:12:34 AM

I admit I skimmed thru that, I saw what you are talking about, I thought that was specific IP addys outside the local net.  I want to shutdown internet access from 7 am to 9am every day for specific computers on my local network.  I'll keep looking

Title: Can I restrict a users access to the Internet?
Post by: funkusmunkus on January 11, 2006, 05:27:59 AM

Ray Mitchell has a nice howto, check it out: http://mirror.contribs.org/smeserver/contribs/rmitchell/smeserver/howto/dansguardian%20instal%20&%20configure%20HOWTO%20for%20sme%20server.htm
What you need to do after you install dansguardian is add ip addresses to etc/dansguardian/exceptioniplist that you want to grant full access to, and add ip addresses to etc/dansguardian/bannediplist that you want to bann. And any other ip address that uses the proxy will be filtered according to dansguardian.

And if you want to force people to use the proxy and not allow them to bypass it, follow the steps I did here http://forums.contribs.org/index.php?topic=26445.msg108600#msg108600


another option is ipblock http://mirror.contribs.org/smeserver/contribs/aloveless/contribs/ipblock_inet/beta/smeserver-ipblock_internet-tg-1.0-b2.noarch.rpm
it will add something on server-manager, you can set times to block a specific ip address, but it doesn’t have any other features

Hope that helps  :-)

cheers

Title: Can I restrict a users access to the Internet?
Post by: edlentz on January 11, 2006, 03:09:17 PM

Hey Funkusmunkus,  that ipblock_internet software looked darn near perfect until I read:
Bugs:
It has been reported that this contrib blocks too much traffic.  Once added, during the specified
time period, the workstation will no longer receive DHCP requests and will be unable to connect to
any shared directories.  Essentially, all network access for that workstation will be denied.
It hasn't been updated in over a year as far as I can tell.  I'm still gonna try it anyway.

Thanks for the info!