On Thu, 29 Apr 2004, Jason Young wrote: > Jim, > > I might be mistaken, but couldn't Varun apply any needed filters on > Shorewall to achieve this; for instance, applying an accept rule on port > 80 for the IP address of his local Web server while denying all other > destination IPs?
Well, we should probably get Varun back into this conversation, but I think he wants some users to be get internet access via his squid cache, while he wants other users to NOT be able to run mozilla to get outside web pages. if both Squid and Mozilla are running on the same box, how do you allow Squid to get outside web pages, while NOT allowing Mozilla ? You can configure Mozilla to go to the squid cache, but a smart user will figure out how to re-configure mozilla to get around the squid proxy. Ultimately, I think he needs to run squid on a different machine. Then, his firewall could block port 80 access from the LTSP server, but allow port 80 access from the squid server. Then, he could use squid rules to allow/deny internal machines from accessing external web sites. Jim. > > - Jason > > > On Thu, 2004-04-29 at 22:25, [EMAIL PROTECTED] wrote: > > I'm thinking that Varun needs his users to have browser access to pages > > on the local server, but he doesn't want them browsing the internet > > > > So far, nobody has addressed that problem. > > > > Jim McQuillan > > [EMAIL PROTECTED] > > > > > > On Thu, 29 Apr 2004, Jim Glutting wrote: > > > > > Hi Varun, > > > It you use a window manager like icewm, there are no icons > > > on the desktop. All programs are launched from the Start menu > > > or the taskbar. You control what goes on the Start menu thru a > > > text file, and only put the references to programs that you want > > > them to have. So if you don't put a browser on the menu, they > > > cannot run an internet browser. > > > > > > Hope that helps > > > JAG > > > > > > Varun wrote: > > > > > > > Hello, > > > > I want to put my ltsp4 server and squid proxy server > > > > on the same machine. > > > > I want internet access only for non ltsp clients. > > > > I want no ltsp clients to have internet access. > > > > Is there any config available in ltsp ? > > > > > > > > Thanks > > > > > > > > Varun > > > > > > > > > > > > ------------------------------------------------------- > > > > This SF.Net email is sponsored by: Oracle 10g > > > > Get certified on the hottest thing ever to hit the market... Oracle > > > > 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. > > > > http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click > > > > _____________________________________________________________________ > > > > Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto: > > > > https://lists.sourceforge.net/lists/listinfo/ltsp-discuss > > > > For additional LTSP help, try #ltsp channel on irc.freenode.net > > > > > > > > > > > > > > > ------------------------------------------------------- > > > This SF.Net email is sponsored by: Oracle 10g > > > Get certified on the hottest thing ever to hit the market... Oracle 10g. > > > Take an Oracle 10g class now, and we'll give you the exam FREE. > > > http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click > > > _____________________________________________________________________ > > > Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto: > > > https://lists.sourceforge.net/lists/listinfo/ltsp-discuss > > > For additional LTSP help, try #ltsp channel on irc.freenode.net > > > > > > > > > > > ------------------------------------------------------- > > This SF.Net email is sponsored by: Oracle 10g > > Get certified on the hottest thing ever to hit the market... Oracle 10g. > > Take an Oracle 10g class now, and we'll give you the exam FREE. > > http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click > > _____________________________________________________________________ > > Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto: > > https://lists.sourceforge.net/lists/listinfo/ltsp-discuss > > For additional LTSP help, try #ltsp channel on irc.freenode.net > > > > ------------------------------------------------------- > This SF.Net email is sponsored by: Oracle 10g > Get certified on the hottest thing ever to hit the market... Oracle 10g. > Take an Oracle 10g class now, and we'll give you the exam FREE. > http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click > _____________________________________________________________________ > Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto: > https://lists.sourceforge.net/lists/listinfo/ltsp-discuss > For additional LTSP help, try #ltsp channel on irc.freenode.net > ------------------------------------------------------- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click _____________________________________________________________________ Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto: https://lists.sourceforge.net/lists/listinfo/ltsp-discuss For additional LTSP help, try #ltsp channel on irc.freenode.net