Internet filtering
in [Debian]
|
Prev: KDE Desktop Themes
Next: nv_videocard_driver
From: vr on 26 Jul 2010 19:40 What is a good utility to block outbound traffic on the home network? Ideally it will not need to be set in a browsers proxy setting to be effective. -- To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org Archive: http://lists.debian.org/5322171bdcbcc94e32c46a97e560361e(a)192.168.0.66
From: Ron Johnson on 26 Jul 2010 20:30 On 07/26/2010 06:38 PM, vr wrote: > What is a good utility to block outbound traffic on the home network? > Ideally it will not need to be set in a browsers proxy setting to be > effective. > Your firewalling router? Plz be more specific in your needs. -- Seek truth from facts. -- To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org Archive: http://lists.debian.org/4C4E269F.2090408(a)cox.net
From: H.S. on 26 Jul 2010 20:30 On 26/07/10 07:38 PM, vr wrote: > What is a good utility to block outbound traffic on the home network? > Ideally it will not need to be set in a browsers proxy setting to be > effective. > > You need to describe your network and the desired control to get some relevant answers. Without knowing these details, the generic answer is to use a firewall on your internet gateway. -- Please reply to this list only. I read this list on its corresponding newsgroup on gmane.org. Replies sent to my email address are just filtered to a folder in my mailbox and get periodically deleted without ever having been read. -- To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org Archive: http://lists.debian.org/i2l93l$84v$1(a)dough.gmane.org
From: vr on 26 Jul 2010 20:50 On Mon, 26 Jul 2010 20:26:29 -0400, "H.S." wrote: > On 26/07/10 07:38 PM, vr wrote: >> What is a good utility to block outbound traffic on the home network? >> Ideally it will not need to be set in a browsers proxy setting to be >> effective. >> >> > > You need to describe your network and the desired control to get some > relevant answers. Without knowing these details, the generic answer is > to use a firewall on your internet gateway. > > The service provider (ATT) provided a four port 2-Wire router that is both wireless and wired. It has very few options for firewalling and is required to connect to their service. I have uplinked an two HP 1800-8G switches to the ISP's device and plugged in my devices there. The LAN has a macintosh client, a couple Windows 7 clients and a few Debian clients and a network printer. I'd like the flexibility to selectively stop outbound protocols up to and including Instant Messenger file transfers but do so without having to configure something specific on the client devices. Other than a new router IP perhaps? -- To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org Archive: http://lists.debian.org/b3bffadc951ba8421f8782f1b25657fc(a)192.168.0.66
From: H.S. on 26 Jul 2010 21:20
On 26/07/10 08:46 PM, vr wrote: > > The service provider (ATT) provided a four port 2-Wire router that is both > wireless and wired. I am not familiar with ATT. Is your service ADSL or cable? > It has very few options for firewalling and is required to connect to > their service. I think I have used a 2-wire router in the past (it broke down and had to replace it, don't have it anymore) and IIRC it had a sufficient firewall control. Yours may be different of course. > I have uplinked an two HP 1800-8G switches to the ISP's device and plugged > in my devices there. The LAN has a macintosh client, a couple Windows 7 > clients and a few Debian clients and a network printer. > > I'd like the flexibility to selectively stop outbound protocols up to and > including Instant Messenger file transfers but do so without having to > configure something specific on the client devices. Other than a new router > IP perhaps? If your router does not have the features you desire, than you probably need to replace it. It may be replaced with a Debian machine working as a router. This will probably give you the maximum flexibility. I use this method and am quite satisfied with it. The machine needs to have two LAN interface to work as a router, one for WAN (internet) and the other for LAN. The other option is to buy a new router that has the desired features. I would recommend a Linksys or another router that is supported by DDWRT, OpenWRT or Tomato open source firmwares. Eventually it all depends on how much you make your current router do this for you. Thanks for your LAN details. Others more experienced can surely give you better advice than I. Regards. -- Please reply to this list only. I read this list on its corresponding newsgroup on gmane.org. Replies sent to my email address are just filtered to a folder in my mailbox and get periodically deleted without ever having been read. -- To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org Archive: http://lists.debian.org/i2lbkp$duk$1(a)dough.gmane.org |