On Wed, May 23, 2007 at 05:23:37PM +0300, [EMAIL PROTECTED] wrote:
> Company policy is a big way to destroy morale and make people
> unproductive.

Perhaps it's time to find a new company, then? :P

> The people that i'm trying to restrict are web programmers
> and know many ways to circumvent squid and acls.

Then it's completely impossible to block them. They'll just tunnel
through anything you can set up. Any kind of http, dns, or even mail
or ping access to the internet can be used by widely available
applications to construct a tunnel, and these people will be quite
capable of finding and using them. Furthermore, the entire exercise
will waste impressive amounts of time on the part of everybody, and
the final result will be slightly less secure and controlled than
whatever you have at present.

To round that off, the staff who were previously using this software
to take a break (which tends to improve their creative efforts once
they get back to work) will instead be expending their energy on
working around the blocks.

Nothing in this outcome is good.

> Discussions with the management left me in charge to block messenger
> access and it will take longer until i reinstall all the workstations
> since they need some maintenance working and i thought it will be easier
> to control access from a firewall point of view, boy i was wrong.

You need to go back to the management and tell them that this is the
wrong approach. In no way will pursuing this course of action increase
the profitability of the business, even in the short term, and it's
quite likely to decrease productivity - tell them that explicitly.

Either the staff using these applications are a real threat to the
bottom line by not doing what they are told in this respect, in which
case you have both grounds and an urgent need to fire them, or they
aren't, in which case it's a waste of time and money to try and stop
them. It's up to management to figure out which category each employee
is in.

There are no recorded instances in history where physically chaining
staff to their desks has improved the company's profit. This is the
same thing.

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to