[K12OSN] Best solution for Internet access, control, and caching?
j.w. thomas
jthomas at bittware.com
Fri Dec 12 01:09:24 UTC 2008
Joseph Bishay wrote:
> Hello,
>
> How is everyone doing?
>
> We're revamping our Church network here and a new situation has
> arisen. Our network has both an k12LTSP server handling around 20
> clients, and several standalone Window and Linux machines that need
> Internet access as well. We have a DSL connection with 5 static IPs.
>
> I've read about Squid/Squidguard, IPCop, Dansguard, smoothwall, and
> lots of other stuff and it's all starting to blur. I'd like to have
> the following:
>
> 1) Ability to log who (client or standalone) accessed what
> 2) Ability to block elementary students from accessing inappropriate sites
> 3) Ability to allow certain computers unfettered access to any site
> 4) A caching mechanism so common sites the whole class runs can be
> faster (is this needed? At some point is used to be all the rave)
> 5) Ability for someone remotely to connect to the LTSP server or one
> of the the other Linux machines for administration.
> 6) Do my laundry :)
>
> I know some products do some things but I don't understand what does
> what. I understand this would have to reside on a standalone machine
> and I have plenty of older computers that I can slap a couple of
> network cards into so that side is no problem.
>
> I look forward to your always-useful feedback.
>
> Thank you
> Joseph
>
> _______________________________________________
> K12OSN mailing list
> K12OSN at redhat.com
> https://www.redhat.com/mailman/listinfo/k12osn
> For more info see <http://www.k12os.org>
>
Squid is a web caching proxy, so that will handle requirement 4.
Squidguard in a squid plugin that will do filtering (Dans guardian is
another filter, but I haven't used it). squidguard is highly
configurable, and it will log who goes where. You can specify time
periods, ip addresses, usernames (though I never tried that). It
operated off blacklists and whitelists. I really liked it and am
getting ready to deploy it on my network. When I get time.
For remote admin, use ssh. squid and squidguard can both be managed
from the command line, so ssh will work just fine for that.
--
Jim Thomas Principal Applications Engineer Bittware, Inc
jthomas at bittware.com http://www.bittware.com (603) 226-0404 x536
I'm a man. But I can change. If I have to. I guess. - Red Green
More information about the K12OSN
mailing list