[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Software Selection Internet Admin School



Hi
On Wed, Nov 13, 2002 at 07:57:58PM -0600, Dan Hunt wrote:
> Would you please consider making suggestions for a school?

Yep. Don't let the kids escape!
oh.. it's not about the kids then :-)

> Inside the school youth log with usernames in a M$ enviroment. 
> I have been asked to suggest software / equipment that would: 
> A) Provide firewall services. 

A linux firewall will do nicely there. At the lowest-level this can
relatively easily be implemented using iptables. Or if you're not
comfortable with that there are quite a few front-ends to iptables (ferm
& shorewall springs to mind, no doubt there are others)

> B) Log ( capture ) the username 

That'll be the difficult bit. Capturing the IP address is easy, but
finding out *who* is logged in is more difficult. That will be an
exercise in itself (=outside my expertise...).

What OS are the clients running? For win95/98 I think you're out of
luck.

> and website visited. 

You could run a web cache (e.g. squid) on the firewall; this will do the
necessary logging for you (as well as improve overall web performance).
And you can do blocking in here as well.

This can easily be daisy-chained with other proxies that provide more
specialised web site blocking.

> C) Report this information.

Geek-translation: "Make something pretty out of the logs".

I guess that the "sarg" package could do the job here. I haven't tried
that myself though.

> Most of these schools have DSL and only one has dialup.
> 
> I do not know enough about network admin to know what debian 
> packages to look at. Does a Log Server 
> http://debianplanet.org/node.php?id=847 do the right job 
> for logging and reporting?

Dunno. Cannot get to the website.

HTH
-- 
Karl E. Jørgensen
karl@jorgensen.com        http://karl.jorgensen.com
Incorrect e-mail quoting in action:
A: No.
Q: Should I include the original email *after* my reply?

Attachment: pgpizfMytDjda.pgp
Description: PGP signature


Reply to: