On 1/23/06, bernd wrote:

On Monday 23 January 2006 13:41, Sunny wrote:

...

On 1/23/06, bernd wrote:

...

How do I block a user from the use of the internet, and still allow use of internal network?

Bernd

Allow access to the Internet to be only trough authenticated proxy server. No authentication - no Internet.

How?

All machines use a router to access internet, right? On that router, install proxy server (squid as an example), and configure the router not to allow any routing. All machines/users have to use this proxy server to browse. And the proxy will ask for authentication before allowing access. So, the users which are granted credentials for the proxy, will have internet access. This solution is OK for browsing and ftp. If you need to control more protocols, etc., maybe a better solution will be SOCKS server, not proxy. -- -- Svetoslav Milenov (Sunny)

This proposal would block a machine, not a user. At 04:43 PM 1/23/06, Brad Bourn wrote:

If said computer uses 192.168.x.x, then your ~should~ be able to configure the router to not allow outside traffic (masquerading).

B-)

On Monday 23 January 2006 2:28 pm, bernd wrote:

...

How do I block a user from the use of the internet, and still allow use of internal network?

Bernd

On Mon, 2006-01-23 at 14:05 -0800, bernd wrote:

On Monday 23 January 2006 13:55, Frank Bax wrote:

...

This proposal would block a machine, not a user.

I need to block a user that would use multiple machines.

Thoughts?

Yes, use squid which is a proxy server and force authentication. -- Ken Schneider UNIX since 1989, linux since 1994, SuSE since 1998