CentOS - Aug 2008 - Firewall/Proxy with time window access control

Hello all,

I have to setup a system that required to block users access internet in 
work time but let them access internet on specified time window e.g 
lunch time.

I plan to use iptables and squid to do block and web caching but I have 
no idea how to control access on time frame. Could any one of you 
experienced with this can give some starting point /document/howto start 
reading ?

My firewal/proxy box will be CentOS 5.2 so I prefer something that can 
install via yum/rpm

Thanks in advance!

Lunix1618 wrote:
> Hello all,
> 
> I have to setup a system that required to block users access internet in 
> work time but let them access internet on specified time window e.g 
> lunch time.
...
> My firewal/proxy box will be CentOS 5.2 so I prefer something that can 
> install via yum/rpm
> 
Hello,
Centos includes Squid which does that and more.
For easier management Webmin (webmin.com) might be of some use.

GIYF,

CM


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

A little birdy told me that Lunix1618 said:

] I have to setup a system that required to block users access internet in work
] time but let them access internet on specified time window e.g lunch time.
] 
] I plan to use iptables and squid to do block and web caching but I have no
] idea how to control access on time frame. Could any one of you experienced
] with this can give some starting point /document/howto start reading ?
] 
] My firewal/proxy box will be CentOS 5.2 so I prefer something that can install
] via yum/rpm

i'd just use cron(8)...
  it should be installed by default...
i'd make two sets of firewall rules... one for the "allow" time
  and one for the "deny" time.... then with cron i'd apply the
appropriate
  set at the appropriate time...

B. Karhan
simon at pop.psu.edu
PRI/SSRI Unix Administrator

Lunix1618 wrote:
> Hello all,
> 
> I have to setup a system that required to block users access internet in 
> work time but let them access internet on specified time window e.g 
> lunch time.
> 
> I plan to use iptables and squid to do block and web caching but I have 
> no idea how to control access on time frame. Could any one of you 
> experienced with this can give some starting point /document/howto start 
> reading ?
> 
> My firewal/proxy box will be CentOS 5.2 so I prefer something that can 
> install via yum/rpm
> 
> Thanks in advance!
>
Use squid for that (no need to play with iptables/crontab) and create 
ACLs in squid
I've done it several times to let people access games/webmail sites 
during lunch time and block them during working-hours ...
-- 
-
Fabian Arrotin <fabian.arrotin at arrfab.net>
"Internet network currently down, TCP/IP packets delivered now by 
UPS/Fedex ..."

Lunix1618 wrote:
> I plan to use iptables and squid to do block and web caching but I have 
> no idea how to control access on time frame. Could any one of you 
> experienced with this can give some starting point /document/howto start 
> reading ?
squid will do time based ACL's - read up on those.

- KB