[KLUG Members] choice of i-filter/firewall/squid box

Tony Gettig members@kalamazoolinux.org
Thu, 01 Apr 2004 22:27:16 -0500


On Thu, 2004-04-01 at 20:57, J.A. Sarma wrote:
> I am asking for some guidance on a choice of /firewall/squid/& internet web
> filtering/ for a small school lab environment.  There is already a Windows
> 2000 server and a separate Printserver locked in place, along with WinNT
> boxes for teacher access.

Firewalls: take your pick. There are lots of them. IPCop, Devil Linux,
etc.

Caching: squid is what you want.

Caching and filtering: squid with squidgaurd, and I would put
Dansguardian in there too. The K-12 district I work for is considering
using Dansguardian. I have it running at home for my kids and I think it
is outstanding. It's easy to setup, manage, and customize. The mailing
list and it's associated archives (currently at Yahoo Groups, I think)
are a great resource. There are lots of good how-to's out there as well.

> There have been many positive responses with a tryout of an LTSP & thin
> client setup.  Now there is a requirement to install a box between the
> broadband cable modem and the rest of the school's internal LAN to filter
> Internet access.
> 

You could do this on one box, but I like to seperate the duties. One
firewall server and one caching server. But that's just me. Others think
differently.

> My first choices have been a second box with an LTSP install with
> squid/squidguard/shorewall and two ethernet NIC's.  Other possibilities are
> a box with Devil-Linux, if I can run squid and squidguard on it.  There
> might be other suggestions.
> 

Depending on your anticipated usage, say more than 10 users, I would
discourage you from putting the caching services on an LTSP server.
Again, I like to seperate that stuff out. 

FWIW, rumor has it that one of the Devil Linux dudes is on this list. ;)

> Recommendations, Anyone?
> 
> John S., KLUG supporting member.

Tony Gettig


> 
> _______________________________________________
> Members mailing list
> Members@kalamazoolinux.org
> 
> 
>