Hello,

On a computer connected to a router, which in turn is connected to the
internet (more or less constantly), how do I restrict some users from
accessing the internet.

The lan is actually in a small community office. A couple of computers
are for the staff, but a third is set aside for a number of public users
to use. It is running Ubuntu. I was asked how to restrict internet
access from that computer (for example, users should be allowed to
connect to the internet only during certain hours of a day) on a user by
user basis. I am more familiar with Debian, hence the query here.
Apparently, they want the administrator to have free access, but
restricted access for other users on that computer.

Pointers will be ful too,
thanks,
->HS



--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

On Sun, Mar 11, 2007 at 04:07:54PM -0400, H.S. wrote:
>
> Hello,
>
> On a computer connected to a router, which in turn is connected to the
> internet (more or less constantly), how do I restrict some users from
> accessing the internet.
>
> The lan is actually in a small community office. A couple of computers
> are for the staff, but a third is set aside for a number of public users
> to use. It is running Ubuntu. I was asked how to restrict internet
> access from that computer (for example, users should be allowed to
> connect to the internet only during certain hours of a day) on a user by
> user basis. I am more familiar with Debian, hence the query here.
> Apparently, they want the administrator to have free access, but
> restricted access for other users on that computer.
>
I believe that what you want is best implemented with some sort of
authenticating proxy. I forget which ones are available, but IIRC, some
of them support rulesets that are time-based and/or user-based.

Regards,

-Roberto

--
Roberto C. Sanchez
http://people.connexer.com/~roberto
http://www.connexer.com

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFF9GNs5SXWIKfIlGQRApVsAJ9cfiL06Inz9rIcP7+4/G3pDyFTAgCgnX/G
aSYxQ1aaZes3c/Pqv6wNzvk=
=4TH4
-----END PGP SIGNATURE-----

On Sun, Mar 11, 2007 at 04:07:54PM -0400, H.S. wrote:
>
> Hello,
>
> On a computer connected to a router, which in turn is connected to the
> internet (more or less constantly), how do I restrict some users from
> accessing the internet.
>
> The lan is actually in a small community office. A couple of computers
> are for the staff, but a third is set aside for a number of public users
> to use. It is running Ubuntu. I was asked how to restrict internet
> access from that computer (for example, users should be allowed to
> connect to the internet only during certain hours of a day) on a user by
> user basis. I am more familiar with Debian, hence the query here.
> Apparently, they want the administrator to have free access, but
> restricted access for other users on that computer.

I have never used it before but you can take a look at the iptables owner match.

http://iptables-tutorial.frozentux.n...BLE.OWNERMATCH

Hope it s.

--
Franck Joncourt
http://www.debian.org
http://smhteam.info/wiki/
GPG server : pgpkeys.mit.edu
Fingerprint : C10E D1D0 EF70 0A2A CACF 9A3C C490 534E 75C0 89FE

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFF9GVExJBTTnXAif4RAt6bAJ9AohA7D9OkWNfyFfP6Ik wpgbZTUwCcDPeM
Qrbakm2znEk/3hykQAPMLsc=
=R+fy
-----END PGP SIGNATURE-----