On Tue, 2004-05-18 at 09:11, Matt Johnson wrote:

OpenOffice...

I've just used the Draw app to get OO.o into our school. At KS2, the Draw app is awesome. And the cost wasn't bad either!

Yes let's get all KS2 children learning to draw properly on a computer! Such drawing skills are also part of the Bronze INGOT so there is an incentive to learn them. Also for web page design an argument for using OO.o or Mozilla Composer is that they are free and will generate reasonable code. So another reason to put these on the network.

Now it's installed into the kids home directories (and a server install for the core files), it'll run on any machine in the school.

The install was a sinch to roll out. I installed it on the server. Did one workstation install from it, where I chose to install in the home drive of the user I was installing under. I then ran a line or two from a linux machine that copied that folder into the other users' folders in that year group.

Seems to be working well. If this method stands up to the test of time, it should be submitted, as install docs don't suggest anything like this for a roll-out.

Anyone see any issues with the way I've done it?

XP clients are more of an issue I think. -- Ian Lynch ZMS Ltd

Hi, If anyone is actually sitting at a computer on such a nice day, I wonder if someone point me in the direction of a good howto please. I'd like to set up a network that the kids can 'play' with (actually it exists) it has it's own domain ip range etc. but we want to see the outside world. I have a suse box that I want to use as a router with two NIC's - I assume that this is the best technique, I've read a howto by Bert Huburt (Linux advanced routing and traffic control), but now I'm confused. Most howto's are concerned with joining LANs - I want only very limited access as below. The accademic network must not be able to access the playnet, and the playnet must only be able to see two IP's on the accademic network, one is our email server, the other is our internet proxy & intranet. it must not see any of the rest of the accademic network. Kind regards Adrian

--- "adrian.wells" wrote:

I have a suse box that I want to use as a router with two NIC's - I assume that this is the best technique, I've read a howto by Bert Huburt (Linux

Yes, If we assume that: eth0 is internal eth1 is internal, with a link to the router on the same subnet... Then, simply: route add default gw <IP> eth1 -- Thomas Adam ===== "The Linux Weekend Mechanic" -- http://linuxgazette.net "TAG Editor" -- http://linuxgazette.net "<shrug> We'll just save up your sins, Thomas, and punish you for all of them at once when you get better. The experience will probably kill you. :)" -- Benjamin A. Okopnik (Linux Gazette Technical Editor) ____________________________________________________________ Yahoo! Messenger - Communicate instantly..."Ping" your friends today! Download Messenger Now http://uk.messenger.yahoo.com/download/index.html

----- Original Message ----- From: "Gary Stainburn" To: "Thomas Adam" ; "adrian.wells" ; "SuSe" Sent: Wednesday, May 19, 2004 5:00 PM Subject: Re: [suse-linux-uk-schools] Routers

On Wednesday 19 May 2004 3:57 pm, Thomas Adam wrote:

...

--- "adrian.wells" wrote:

...

I have a suse box that I want to use as a router with two NIC's - I assume that this is the best technique, I've read a howto by Bert Huburt (Linux

Yes,

If we assume that:

eth0 is internal eth1 is internal, with a link to the router on the same subnet...

Then, simply:

route add default gw <IP> eth1

That would only enable toe Suse box to get out. It sounds like they want boxes inside that to access the net too. The best way is the install shorewall on the Linux box.

It makes the various bits of creating a firewall very simple, including enabling ip forwarding, and setting up the iptables rules to make everything safe.

Personally, I've just set up a Connexant 4-port ADSL router with built in firewalling. It was an absolute doddle, is the size of a modem, and sits inside the TV cabinet with the video/DVD etc. (The lights also tell me when the lad's got his PC turned on while I'm downstairs watching telly)

I've also got a similar box but by Solwise that I use at home, but use a Cisco 2621 at school for external connectivity via radio at 10 meg. It should be realised that routing and Firewalls are two different things though they are often combined. I use a combination of a server acting as a proxy/router/firewall in conjunction with the above mentioned Cisco 2621, though our box is an MS contraption and not Linux. By installing two NICs' with one being on the internal IP range and the other on the external (often Public) range then the machine can be turned into a router. Internal machines are pointed at the machine using the internal range and the gateway is via the external NIC. By installing IP Tables or IPchains then this can be turned into a firewall, and by installing Squid you also have a proxy. A hardware router such as our Cisco router will, in my opinion, offer a better solution for routing and a proper hardware firewall will also offer a better solution than a computer or the router for that specific purpose. There is a place for all of them and they are all often used in conjunction with each other. The linux bos will provide a method, especially if you want to learn how things work, of doing this without a further investment in equipment, racks, etc. ********************************************************************** Note : This E-Mail is sent in confidence for the addressee only. Unauthorised recipients must preserve this confidentiality and should please advise the sender immediately by telephone and then delete the message without copying or storing it or disclosing its contents to any other person. We have taken all reasonable precautions to ensure that no viruses are transmitted to any third party. Any liability (in negligence or otherwise) arising from any party acting, or refraining from acting on any information contained in this e mail is hereby excluded. Should you communicate with anyone at this address by e-mail, you consent to us monitoring and reading any such correspondence. Printing this email? Please think environmentally and only print when essential! **********************************************************************

Another possible bullet point for the outline proposal could be that all materials produced will be e-gif compliant http://www.govtalk.gov.uk/schemasstandards/egif.asp This should be worth brownie points with the office of the e-envoy. Cheers -- Phil Driscoll

I think I missed most of this, but did anyone mention www.freesco.org as an excellent router implementation? John At 14:10 20/05/04 +0100, you wrote:

Many thanks everyone that replied,

I chickened out and I've gone with the VLAN solution. Secure unless someone gets access to the mail server or proxy. Plenty good enough at the moment. And I keep my spare LINUX box to play with :-)

If anyone wants any extra info, drawings etc of what I've done, just shout.

Kind regards Adrian

----- Original Message ----- From: "Gary Stainburn" To: "Thomas Adam" ; "adrian.wells" ; "SuSe" Sent: Wednesday, May 19, 2004 5:00 PM Subject: Re: [suse-linux-uk-schools] Routers

...

On Wednesday 19 May 2004 3:57 pm, Thomas Adam wrote:

...

--- "adrian.wells" wrote:

...

I have a suse box that I want to use as a router with two NIC's - I assume that this is the best technique, I've read a howto by Bert Huburt (Linux

Yes,

If we assume that:

eth0 is internal eth1 is internal, with a link to the router on the same subnet...

Then, simply:

route add default gw <IP> eth1

That would only enable toe Suse box to get out. It sounds like they want boxes inside that to access the net too. The best way is the install shorewall on the Linux box.

It makes the various bits of creating a firewall very simple, including enabling ip forwarding, and setting up the iptables rules to make everything safe.

Personally, I've just set up a Connexant 4-port ADSL router with built in firewalling. It was an absolute doddle, is the size of a modem, and sits inside the TV cabinet with the video/DVD etc. (The lights also tell me when the lad's got his PC turned on while I'm downstairs watching telly)

-- Gary Stainburn

This email does not contain private or confidential material as it may be snooped on by interested government parties for unknown and undisclosed purposes - Regulation of Investigatory Powers Act, 2000

-- To unsubscribe, e-mail: suse-linux-uk-schools-unsubscribe@suse.com For additional commands, e-mail: suse-linux-uk-schools-help@suse.com

-- To unsubscribe, e-mail: suse-linux-uk-schools-unsubscribe@suse.com For additional commands, e-mail: suse-linux-uk-schools-help@suse.com

This e-mail is confidential and intended solely for the use of the individual to whom it is addressed. Any views or opinions presented are solely those of the author and do not represent those of St Mary's Hall.

--- Thomas Adam wrote: > --- Matt Johnson wrote:

...

Anyone see any issues with the way I've done it?

No, but then if you search the archives of this list, I know this idea has been discussed before.

Damn those pioneers. I'll keep you posted if time shows up some issues. And XP?... mull mull. -- Matt Send instant messages to your online friends http://uk.messenger.yahoo.com