On Thu, Aug 16, 2007 at 07:49:25AM +0100, Simon Hobson wrote: > Firstly, although you can configure DHCP to give certain IPs to > certain machines, it doesn't prevent a user setting their network > settings - so you will probably want to filter by mac address/ip so > that if they change their settings their machines don't get an > internet connection.
That's not appreciably secure, though. A better solution may be to force all web access to go through squid and use proxy authentication combined with squid's time-based acls. However it should be noted that pitting your ingenuity against their youthful curiosity is a doomed endeavour. If it is necessary for you to resort to technical means to try to enforce this, they'll find a way around it, sooner or later. ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
