Internet Content Filtering Suggestions

[Federico Voges]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, 13 Feb 2003 11:03:43 -0600, Ben Duncan wrote:

>Have a client that has about 25 WinSLug Computers. We need to 
>implement some sort
>content / virus filtering, as the employees are starting to abuse the 
>internet connection.
>
>We need to allow them to access certain web sites, restrict others, 
>BLOCK ICQ/AIM, and
>do a "time" (Absolutely NO access to the internet after 6PM).
>
>Now SonicWall seems to be the leading contender here for an appliance 
>solution, BUT, they
>want a "subscription" on all of there devices.
>
>Any Suggestion here? NutZwerk Appliance? Cheap PC with linux and some 
>sort of easy to use
>admin software?
>
Te most flexible solution is the last: PC + Linux.

You can use Squid + some extra soft to limit web usage and
netfilter/iptables to block IMs.

In fact, if you just need ftp/web access you can turn of forwarding at
the gateway and force everyone to go out through Squid (and maybe, a
socks server).

One caveat: you'll need at least some scripting skills to go this way.

Another option is to use one of the comercial "out of the box"
solutions. One that looks ok is Astaro Security Linux (www.astaro.com).
It's comercial but you can download the full product iso image to
testing (if you like it, all you need to do is enter de reg key in the
control panel).

I haven't used it, but appears to be one of the mos t complete and
flexible arround.

You can also go the LRP style and use one of the many LRP
clones/derivatives. A good start point is http://leaf.sf.net

Just my $0.02 :)
Federico Voges
Socio gerente

Intrasoft
Malabia 2137 14 A
(1425) Buenos Aires
Argentina

Te/Fax: 54-11-4833-5182
e-mail: fvoges at intrasoft.com.ar
Web: http://www.intrasoft.com.ar

-----BEGIN PGP SIGNATURE-----
Version: PGP SDK 3.0

iQA/AwUBPkvm1RRcJRaVKt4XEQKyMQCdHlfBUmyXTCo3G8RUMR2MAqZuAGsAn1PN
0PbSmODgk0PS7GpFcBayUQYA
=3pre
-----END PGP SIGNATURE-----