[rhn-users] Internet Restriction
Strickler Carl
cstrickler at iitri.org
Wed Feb 23 16:35:07 UTC 2005
Another way of doing this, assuming that you're running bind on the box, is
to put a dummy zone file for the domain that you don't want people to be
able to resolve in your named.conf. The advantage of this is that you can
block a whole domain and it's easy to add another domain. The disadvantage
is that if the user knows the IP address of their favorite site it's easy to
get around (but almost noone does :]).
Example:
In your named.conf:
zone "hotbar.com" {
type master;
file "other_zones/unwanted.zone";
};
zone "gator.com" {
type master;
file "other_zones/unwanted.zone";
};
zone "gainpublishing.com" {
type master;
file "other_zones/unwanted.zone";
};
zone "mysearch.com" {
type master;
file "other_zones/unwanted.zone";
};
zone "myweb.com" {
type master;
file "other_zones/unwanted.zone";
};
zone "myway.com" {
type master;
file "other_zones/unwanted.zone";
};
And then then unwanted.zone file would look like this:
$TTL 3D
@ IN SOA yourserv.example.com. root.yourserv.example.com (
2002040900
28800
7200
2419200
86400 )
IN NS yourserv.example.com.
IN NS ns2.example.com.
IN A 127.0.0.1
* IN CNAME @
In case it wasn't obvious everything in the zone resolves to 127.0.0.1.
If your running squid you might want to look at this:
http://www.squid-cache.org/Doc/FAQ/FAQ-10.html
- Carl
-----Original Message-----
From: rhn-users-bounces at redhat.com [mailto:rhn-users-bounces at redhat.com] On
Behalf Of John Hall
Sent: Wednesday, February 23, 2005 9:56 AM
To: Red Hat Network Users List
Subject: RE: [rhn-users] Internet Restriction
How about using the firewall if you have the IP addresses of the sites you
don't want folks to visit.
-----Original Message-----
From: rhn-users-bounces at redhat.com [mailto:rhn-users-bounces at redhat.com]
On Behalf Of Sammy Msafiri
Sent: Wednesday, February 23, 2005 5:28 PM
To: 'Red Hat Network Users List'
Subject: [rhn-users] Internet Restriction
Hi guys,
I have a redhat linux 7.2 box used as internet and email gateway. I need to
restrict access to some internet sites.
How can I achieve this. Thanks in advance.
Cheers
Sammy
-----Original Message-----
From: rhn-users-bounces at redhat.com [mailto:rhn-users-bounces at redhat.com]
On Behalf Of Ferguson, Michael
Sent: Tuesday, February 22, 2005 3:01 PM
To: Red Hat Network Users List
Subject: RE: [rhn-users] TFTP Server
Thanks. I will give it a try. 'preciate it.
-----Original Message-----
From: rhn-users-bounces at redhat.com [mailto:rhn-users-bounces at redhat.com]
On Behalf Of Strickler Carl
Sent: Tuesday, February 22, 2005 5:10 PM
To: 'Red Hat Network Users List'
Subject: RE: [rhn-users] TFTP Server
http://www.linux.com/howtos/Clone-HOWTO/setting-up.shtml
-----Original Message-----
From: rhn-users-bounces at redhat.com [mailto:rhn-users-bounces at redhat.com]
On Behalf Of Ferguson, Michael
Sent: Tuesday, February 22, 2005 4:06 PM
To: rhn-users at redhat.com
Subject: [rhn-users] TFTP Server
G'Day All,
I did quite a bit of reading on setting up a TFTP server for the benefit of
my CISCO Switches and IP Phones but am now more unsure that before. Can
someone help me to locate docs on setting up the TFTP server successfully?
Thanks
Ferg
_______________________________________________
rhn-users mailing list
rhn-users at redhat.com https://www.redhat.com/mailman/listinfo/rhn-users
_______________________________________________
rhn-users mailing list
rhn-users at redhat.com https://www.redhat.com/mailman/listinfo/rhn-users
_______________________________________________
rhn-users mailing list
rhn-users at redhat.com https://www.redhat.com/mailman/listinfo/rhn-users
____________________________________________________________________
- This email and any files transmitted with it are confidential and
intended solely for the use of the addressee. If you have received
this email in error you may not disclose, copy, distribute or act
upon its contents without the authors prior written consent. Please
can you notify the system manager at postmaster at somak-nairobi.com
immediately and delete this email.
- Any views or opinions expressed are those of the author and do not
necessarily represent those of Somak Travel Limited, Kenya.
- This footnote also confirms that this email message has been swept
for the presence of computer viruses. No responsibility can be
accepted in the event that a virus is contained within it or any
attachments.
- SOMAK TRAVEL LTD - KENYA
NAIROBI, PO BOX 48495. Tel: +(25420) 557832 Fax:+(25420) 535175
MOMBASA, PO BOX 90738. Tel: +(25441)5486197 Fax:+(25441)5487324
____________________________________________________________________
_______________________________________________
rhn-users mailing list
rhn-users at redhat.com https://www.redhat.com/mailman/listinfo/rhn-users
<!D2S:johnh at snetworking.com/good/a08392745dcb241a/>
_______________________________________________
rhn-users mailing list
rhn-users at redhat.com https://www.redhat.com/mailman/listinfo/rhn-users
More information about the rhn-users
mailing list