[K12OSN] Best solution for Internet access, control, and caching?

Huck dhuckaby at paasda.org
Fri Dec 12 01:48:19 UTC 2008


IPCOP...
with the following addons
advanced proxy
url filter
update accelerator
zerina

deployed in many facilities...schools/churches/businesses...
works lovely..and if you want truly draconian control...
install BlockOutTraffic(BOT)...and nothing leave/enters without strict 
ACLs...

--Huck

j.w. thomas wrote:
> Joseph Bishay wrote:
>> Hello,
>>
>> How is everyone doing?
>>
>> We're revamping our Church network here and a new situation has
>> arisen.  Our network has both an k12LTSP server handling around 20
>> clients, and several standalone Window and Linux machines that need
>> Internet access as well.  We have a DSL connection with 5 static IPs.
>>
>> I've read about Squid/Squidguard, IPCop, Dansguard, smoothwall, and
>> lots of other stuff and it's all starting to blur.  I'd like to have
>> the following:
>>
>> 1) Ability to log who (client or standalone) accessed what
>> 2) Ability to block elementary students from accessing inappropriate 
>> sites
>> 3) Ability to allow certain computers unfettered access to any site
>> 4) A caching mechanism so common sites the whole class runs can be
>> faster (is this needed? At some point is used to be all the rave)
>> 5) Ability for someone remotely to connect to the LTSP server or one
>> of the the other Linux machines for administration.
>> 6) Do my laundry :)
>>
>> I know some products do some things but I don't understand what does
>> what.  I understand this would have to reside on a standalone machine
>> and I have plenty of older computers that I can slap a couple of
>> network cards into so that side is no problem.
>>
>> I look forward to your always-useful feedback.
>>
>> Thank you
>> Joseph
>>
>> _______________________________________________
>> K12OSN mailing list
>> K12OSN at redhat.com
>> https://www.redhat.com/mailman/listinfo/k12osn
>> For more info see <http://www.k12os.org>
>>
> 
> Squid is a web caching proxy, so that will handle requirement 4. 
> Squidguard in a squid plugin that will do filtering (Dans guardian is 
> another filter, but I haven't used it).  squidguard is highly 
> configurable, and it will log who goes where.  You can specify time 
> periods, ip addresses, usernames (though I never tried that).  It 
> operated off blacklists and whitelists.  I really liked it and am 
> getting ready to deploy it on my network.  When I get time.
> 
> For remote admin, use ssh.  squid and squidguard can both be managed 
> from the command line, so ssh will work just fine for that.
> 




More information about the K12OSN mailing list