Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: mheymann on May 11, 2009, 05:36:34 PM

Title: Access Configuration
Post by: mheymann on May 11, 2009, 05:36:34 PM

Is is possible to give a user access to the mail server but not the Web server (ie. can not browse the web)

I was looking at the some of the firewall settings from the firewall how-to configuration page
'http://wiki.contribs.org/Firewall' and thought that the Allow/Deny hosts commands
might be able to do what I need.

I am thinking that I can deny a range of specified internal IP address access to the HTTP server

Title: Re: Access Configuration
Post by: janet on May 12, 2009, 10:03:17 AM

mheymann

Quote

Allow/Deny hosts commands might be able to do what I need.

That's really for controlling external traffic trying to acccess your web server.

Look at
http://wiki.contribs.org/Dansguardian

Quote

...I can deny a range of specified internal IP address access to the HTTP server

All the configuration you require is in the config files, so install it and read them.

Depending on which way you want to set it up, (ie ban all allow some, or allow all ban some), look at
http://wiki.contribs.org/Dansguardian/ConfigFiles
for
bannediplist
IP addresses of client machines to disallow web access to. Only put IP addresses here, not host names.

and
exceptioniplist
This contains a list of client IPs who you want to bypass the filtering. For example, the network administrator's computer's IP.

Title: Re: Access Configuration
Post by: mheymann on May 12, 2009, 05:17:25 PM

Thank you for your feedback.  It is quite helpful
I have been considering implementing Dansguardian on our SME server
for some time now and just have not had the chance to do it.
This new issue will push the need to get this option tested and setup.