Text 220, 66 rader
Skriven 2006-07-07 10:29:22 av David Calafrancesco (1:2624/306.0)
    Kommentar till text 193 av Rich Wonneberger (1:2624/50)
Ärende: installing Linux with eCS
=================================
Rich Wonneberger wrote in a message to David Calafrancesco:

 RW> *** Quoting David Calafrancesco to Rich Wonneberger dated 06-25-06
 RW> *** 
> Yeah, install Dan's Guardian package into a standard Debian or Ubuntu 
> system. Debian if this will be a basic text only server environment, or
> Ubuntu if you also want all the GUI desktop features to come along. 
> Dan's guardian is an addon for the SQUID proxy, and it allows for full 
> filtering and different user classes. Some users/IPs get filter A, 
> others get FIlter B and still others may not get any filtering at all. 

 RW> Someone already pointed me to Dans Guardian.  Good possibility. I
 RW> think Ubuntu may be easier for me up front.  Having 'classes' for
 RW> users would make things easier.
 RW> I'm not up on all the Linux commands, very few actually.

 RW> *** Quoting David Calafrancesco to Rich Wonneberger dated 06-25-06
 RW> *** 
> Your system will want to have two Ether cards and will act as a DHCP 
> server and firewall for the users inside. This means you won't be using
> a standard wireless router/firewall device like a Linksys. If you need 

 RW> There already is a Windy 2003 server at the site that is the DHCP
 RW> server.  (Also serves A.D., Web, and Norton server)
 RW> My hardware plan is:
 RW> DSL modem
 RW> Linksys with 4 ports (2 in use, 1 feeding the proxy, 1 to a camera
 RW> system) The proxy system (2 nics)
 RW> At this point I think the proxy system would plug into a switch
 RW> with the rest of the network available.
 RW> I don't see using Windy for DHCP as a problem for this, do you? 

There are two ways to deal with a proxy, one is to tell each workstation to
talk to a proxy to get to the internet, and the other is to direct all requests
to the internet through the proxy. The second is a preferred approach when you
don't ever want a user to be able to go around the proxy because you are using
it for filtering. 

Unfortunately that means you need some form of firewall redirector that can
take all http/https requests, on whatever ports are needed, and direct them to
the proxy server. I would get a copy of the Dans Guardian setup docs and read
them and see which setup will work best in your scenario. There is no reason
you can't have it go as so: 

dsl modem -> Ubuntu proxy/firewall server -> switch -> {dhcp server, web
server, workstations, switches et al}

That would force all traffic through the firewall and allow you to easily
direct incoming traffic to each server that needs to service them and none to
systems that don't need to see inbound traffic. You can also allow filtering
based upon IP address or other rules. 

As for your question of problems with using windows for stuff, I would never
choose to use windows for anything that wasn't absolutely dictated by a service
only being offered on a windows platform, but then I am perfectly comfortable
using Linux for everything. I am even willing to work longer and harder to get
a service running under Linux than to take an easy way out and just click an
installer under windows because I know that my long term maintenance costs of
Linux are so much less than the costs of Windows. 

Dave Calafrancesco, Team OS/2
dave@drakkar.org

... They got the library at Alexandria, they're not getting mine! 
--- 
 * Origin: Druid's Grove BBS - telnet:bbs.drakkar.org (1:2624/306)