asked on

Proxy/Firewall Info

I wanted to build a proxy/firewall. I am currently running IPCop which runs fine with the exception I wanted to be able to give certin users internet access and block others. I would also like to be able to block certin sites for some users and not for others. I don't have alot of money to throw at this so the cheaper solution the better. I tried CensorNet but could not get it to intergrate with my server 2003 active directory, so I have Disregarded that solution.

Thanks in Advance

mrxcol

If you want, you can try installing a linux machine and set up iptables. It's fast and powerfull. Once you get to manage it (it's hard to catch up) but it's a very powerfull firewall.

ASKER CERTIFIED SOLUTION

Marakush

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

pwslgl

That fixed the error, now it comes up with this:

Warning: Wrong parameter count for define() in D:\Domains\dagger3d.com\wwwroot\forum\attach_mod\pm_attachments.php on line 24

Warning: Cannot modify header information - headers already sent by (output started at D:\Domains\dagger3d.com\wwwroot\forum\attach_mod\pm_attachments.php:24) in D:\Domains\dagger3d.com\wwwroot\forum\includes\sessions.php on line 308

Warning: Cannot modify header information - headers already sent by (output started at D:\Domains\dagger3d.com\wwwroot\forum\attach_mod\pm_attachments.php:24) in D:\Domains\dagger3d.com\wwwroot\forum\includes\sessions.php on line 309

Fatal error: Cannot redeclare reordercat() (previously declared in D:\Domains\dagger3d.com\wwwroot\forum\admin\admin_album_cat.php:51) in D:\Domains\dagger3d.com\wwwroot\forum\includes\functions_jr_admin.php on line 199

pwslgl

Sorry, wrong forum.

2hype

ASKER

I want this to be a proxy/Firewall in one box. It must be capable of blocking certain websites for certain users. This is in a school enviroment, Students move around from computer to computer so it would have to block the user not the computer.

The above links dont provide the proxy and the restricting user access
Thanks

mrxcol

Again, try linux. You can configure iptables (firewall) on a per user basis to block user access. Also you can use squid (caching proxy) also on a per user basis or on a general basis to block certain pages. I use it to block child access to pornography. With some distros like mandrake 9.0, everithing (proxy and firewall) install inmmediately with no additional task to be done.

Then you can edit /etc/squid/squid.conf and add lines to block pages. If you want to try this way tell me so i post the whole things to be done.

2hype

ASKER

Do you know of a site or have some documentation how to set up linux and configure IP tables.

Thanks

mrxcol

This is one of the best tutorials i've found.

http://iptables-tutorial.frozentux.net/iptables-tutorial.html

If you speak spanish this one also has many practical samples showing what can you do in different scenarios:

http://es.tldp.org/Manuales-LuCAS/doc-iptables-firewall/doc-iptables-firewall-html/

Marakush

TheLearnedOne,

Sounds good to me....

Marakush

2hype

ASKER

Never Had Time yet to fool around with IPtables. So I'll assume it will work for me.
Right now I use a combination of IPCop and MSProxy.

Thanks Everyone

Marakush

IPCop is sweet....

Good Luck!

Marakush