large campus network ... sugestions

["Tirla Adrian" <tirlaadi@gmail.com>]

Hello Adrian,

Thanks for your suggestions. They are really helpful.I'll consider it
as i mentioned to Andradas, but for now i'll keep looking for an
option where my users just authenticate and don't have to keep any
browser opened or something like this. For now it just looks like
impossible ?!

Adrian TIRLA

On Dec 14, 2007 8:40 PM, Adrian Minta <adrian.minta@gmail.com> wrote:

> Tirla Adrian wrote:
> > Hello,
> >
> > I`m currently one of the network administrators of a 3000+ students
> > and i have some issues maintaining security, authentication ... and
> > quality of service ...
> >
> >
>
> 1. For authentication you may use something like:
> http://horatio.sourceforge.net
> 2. Block outgoing connection on ports like: 25, 445, 137-139, block
> multicast, broadcast and bogons.
> 3. To save bandwidth use transparent proxy.
> 4. Limit each IP to a maximum bandwidth using HTB and especially limit
> NAT translation per IP to a reasonably small amount ( 32 should be fine
> if you are not allowing P2P).
>
> --
> Best regards,
> Adrian Minta    MA3173-RIPE, MA314-ROTLD, www.minta.ro
>
>
>
>
>
> --
> To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
>