D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] Dansguardian

 

I apologize to all for the bad spelling and grammar in that last email.


From: ancwg@xxxxxxxxxxx
To: list@xxxxxxxxxxxxx
Date: Wed, 10 Jun 2009 14:27:29 +0000
Subject: Re: [LUG] Dansguardian



> Date: Wed, 10 Jun 2009 15:20:47 +0100
> From: simon@xxxxxxxxxxxxxx
> To: list@xxxxxxxxxxxxx
> Subject: Re: [LUG] Dansguardian
>
> Austin Gossmeyer wrote:
> >
> > If my understanding of transparent proxies is correct (I had zero
> > knowledge two weeks ago) it would grab all trafic including staff. So if
> > it grabbed staff how could I seperate the traffic cause staff and
> > students have seperate proxies at the isp.
>
> Making it transparent requires control of where the packets are routed.
>
> Typically you either put the proxy at a choke point, or direct the
> traffic to the proxy using a router or firewall (which is itself a choke
> point, or set of edge points).
>
> When you put in the redirect rule to transparently use the proxy, you
> can usually exempt certain IP addresses.
>
> Alternatively you can force folks to authenticate to get proxy service,
> and apply different rules to different user groups.
>
> But this destroys the simplicity of a transparent proxy, ideally you
> want transparent so things like routers doing firmware updates, or
> Windows Update on visiting laptops "just works".
>
> Given user management is hard work, I'd go for IP based if you can
> distinguish staff from students that way.
>
As all pcs on site use dhcp except servers I don't think ip sorting will work.

> Alternatively speak to management and see if there is anything the staff
> should be allowed to do that the students shouldn't when using college
> resources ;)
>
Our isp filters stuff thus we have two isp proxies for staff and students. But management aren't happy with the level of blocking provided for students.  Thus the only tech interested in linux (me) got handed the job even though my knowledge is next to nothing.

> --
> The Mailing List for the Devon & Cornwall LUG
> http://mailman.dclug.org.uk/listinfo/list
> FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html


Lauren found her dream laptop. Find the PC that’s right for you.

Hotmail® has ever-growing storage! Don’t worry about storage limits. Check it out.
-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html