RE: Software Selection Internet Admin School
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
I assume you are requesting suggestions for a linux based router?
For firewalling, if you are running a 2.2 kernel, look into ipchains, if you are running 2.4 look into iptables. There is a lot of firewall generator programs out there - gaurddog, firestarter, ferm, etc... these can make setting up a firewall for the timid easier.
For logging the username, you're going to have to use some sort of "sniffer" on the router box, dsniff, tcpdump, ngrep, etc... You could also setup a proxy that records the required information - I don't have any examples on hand...
For reporting this information you could simply grep a log to find what you want, then mail it to x@x.com, this is done easily with crontab.
As for the log server paper, that is not what you want, what that paper discusses is setting up a remote syslogd server, to obtain all syslog traffic on a network from various hosts on the network, although the document also has a lot of hardening tips.
Vince Hillier
vdh@plutonium.homeunix.com
http://plutonium.homeunix.com
|-----Original Message-----
|From: Dan [mailto:dan.hunt@st.brieux.com] On Behalf Of Dan Hunt
|Sent: Wednesday, November 13, 2002 5:58 PM
|To: debian-user@lists.debian.org
|Subject: Software Selection Internet Admin School
|
|Would you please consider making suggestions for a school?
|Inside the school youth log with usernames in a M$ enviroment.
|I have been asked to suggest software / equipment that would:
|A) Provide firewall services. B) Log ( capture ) the username
|and website visited. C) Report this information.
|Most of these schools have DSL and only one has dialup.
|
|I do not know enough about network admin to know what debian
|packages to look at. Does a Log Server
|http://debianplanet.org/node.php?id=847 do the right job
|for logging and reporting?
|
|The "Microsoft Network Administrator" felt that by trimming
|(somehow) the information the workstation info could be left
|out and ONLY the username and website address could be reported.
|
|For Example:
|Nov 22 2002 09:15 | davey-smith | barbie.com
|Nov 22 2002 09:22 | davey-smith | bay-watch-girls.com
|
|Any URL donated will be gratefully evaluated.
|
|
|--
|To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
|with a subject of "unsubscribe". Trouble? Contact
|listmaster@lists.debian.org
|
-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0 (Build 349) Beta
iQA/AwUBPdNIukBtW3tWqkVxEQIvrgCcCnk0hQLo/u3LNSzIFns2yr1z5UsAoMX/
crYqjka7BUYXBhAeDb9aUent
=PPqx
-----END PGP SIGNATURE-----
Reply to: