control of internet access

[Gavin McCullagh]

H

On 11/11/2007, Kai Wüstermann <k.wuestermann at gmx.de> wrote:
>
> We are a primary school with children up the age of 10. So we need to
> control the Internet access in edubuntu for the children.
>
> We want to...
>
> ... switch off the Internet for all the thin clients

... log the sites and pages a user retrieves
> ... use a blacklist for the children's Internet access
> ... switch on the Internet access (It would be nice to do this for
> special user groups or classrooms)


It's probably not the simplest way to do this, but iptables can have rules
based on the uid and gid.  So you could have a couple of iptables rulesets
which only allow 'net access to members of the teachers group.  This would
allow them full access.  You could then have more restrictive rules and
logging for non-members.  That could nicely do all of the above, except
perhaps the blacklist.  Really, to run a blacklist you need someone else to
write the blacklist. Dan's guardian is one example, I'm not sure if a good
iptables-based blacklist exists.  A whitelist would be easy to do with
iptables though.

Gavin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.ubuntu.com/archives/edubuntu-users/attachments/20071111/e0ba3dd5/attachment.htm