Lee Marzke on 8 Sep 2009 15:18:36 -0700 |
James Barrett wrote: > I suggest a hardware firewall running Linux. Configure it as a > transparent bridge using two NICs. Use ebtables to route all http > traffic through squid and install clamav. If you want to have content > filtering for the kids, then it is very easy to add DansGuardian to > this configuration. If they start using HTTPS Proxy servers to > circumvent DansGuardian, then you can implement deep packet filtering > to drop all SSL traffic. > > However, if you haven't setup these tools before, then this is likely going to be several days or more to learn all these tools, and several days more to come up with a production tested configuration. A good learning experience perhaps, but then only you will be able to support it. If you not interested in the academic exercise, then the free Linux appliance "Endian Firewall - community ) might be useful. And just about any Windows admin could probably support it. http://efw.it ( Web GUI, 4 zones, http proxy, clamAV, DansGuardian , much more ) Lee > Hey ... remember? This is a Linux mailing list! > > -- > James Barrett > > ___________________________________________________________________________ Philadelphia Linux Users Group -- http://www.phillylinux.org Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug
|
|