On Wed, 2005-04-13 at 15:55 +0100, Phil Davey wrote:
> On Sat, 9 Apr 2005, Deepankar  Chanda wrote:
> > LTSP INTERNET RESTRICTION / ACCESS CONTROL: I WOULD LIKE LTSP.ORG /
> > DEVELOPER TO ADDRESS THIS PROBLEM. IT IS A CRITICAL / ESSENTIAL FEATURE 
> > SPECIALLY IN A NETWORKED COLLEGE / SCHOOL ENVIRONMENT.
> 
> Shouting (ie using all upper case) and posting multiple times is unlikely 
> to help get a response.

Totally with you on that.

> >I want to give Internet access to some LTSP CLients based on their 
> >NIC/MAC address. Please give a solution to do this using Gateway and 
> >Domain-Name-Servers.
> 
> Using LTSP, all programs (including the web browser) run *on the server* 
> and not on each desktop box. The result, as you've seen, is that all 
> internet access appears to be from the server.
> 
> If you really want to be able to control internet access by mac address, 
> you need to run the web browser on each desktop box. This is possible 
> using LTSP, but not as easy and misses a lot of the reason to use LTSP in 
> the first place.
> 
> The alternative is to run some kind of proxy/firewall that is based on the 
> username rather than the mac address. I've not tried this myself, but I've 
> seen it mentioned several times on this list. Try searching the archives 
> for 'squid'.

We have made a firewall box ahead of the LTSP box and running squid on
that gives all control features. An old P1/P2 is good enough.
-- 
Sudev Barar
Learning Linux



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net

Reply via email to