similar to: Block internet access for some users on the LAN ?

The way to do this is with ACL's. Access Control Lists IPtables can perform this function, or an internet gateway router can also be used. The ISR 4000 Series Cisco router family is where I would start, especially if you're in the need for a blade server in the same chassis. -----Original Message----- From: CentOS [mailto:centos-bounces at centos.org] On Behalf Of Nicolas Kovacs Sent:

Hi, This is probably a bit OT, but here goes. I've been running our local school's mail server since 2013, with mail addresses for school staff and some teachers. The server is running CentOS 7 with Postfix and Dovecot, and it's a nice no-bullshit configuration with SPF, DKIM and DMARC. The school sends quite a lot of email out to parents, and sometimes, mail gets rejected:

Hi, I've been working with Squid + SquidGuard for a few years, though only on Slackware. I'm currently transferring my proxy expertise to CentOS 7, and right now I'm having a little problem with that. Squid works perfectly so far as a transparent HTTP + HTTPS cache proxy. The next step is to add SquidGuard, so I installed it and edited the most basic /etc/squid/squidGuard.conf file

On Mon, 30 Sep, 2019 at 23:47:02 -0700, John Pierce wrote: > On Mon, Sep 30, 2019 at 10:26 PM Nicolas Kovacs <info at microlinux.fr> wrote: > > > Le 30/09/2019 ? 17:53, Gwaland a ?crit : > > > looks like it was updated due to a segfault. > > > https://bugzilla.redhat.com/show_bug.cgi?id=1750550 > > > https://bugzilla.redhat.com/show_bug.cgi?id=1253662

Hi, The SquidGuard URL redirector has recently been updated in EPEL, and I'm a bit puzzled. I'm still using SquidGuard on a few local proxy servers running CentOS 7, because it's a nifty piece of software for filtering web traffic. The project's home page has remained unchanged for more than ten years: * http://www.squidguard.org/ It looks like the project has been dormant or

Le 30/09/2019 ? 17:53, Gwaland a ?crit?: > looks like it was updated due to a segfault. > https://bugzilla.redhat.com/show_bug.cgi?id=1750550 > https://bugzilla.redhat.com/show_bug.cgi?id=1253662 Now I'm even more puzzled. Fedora and EPEL sport SquidGuard 1.4.36. Now when you search for "squidguard", this seems to be the project site: * http://squidguard.org/index.html

Chase, Brian E. wrote: > The way to do this is with ACL's. Access Control Lists > IPtables can perform this function, or an internet gateway router can also > be used. > The ISR 4000 Series Cisco router family is where I would start, especially > if you're in the need for a blade server in the same chassis. > > -----Original Message----- > From: CentOS

Le 29/09/2019 ? 18:48, Stephen John Smoogen a ?crit?: > Is there a problem with the version which is in EPEL? No, there isn't. I was just puzzled that there was an update to an application that's been manifestly dormant for more than ten years. -- Microlinux - Solutions informatiques durables 7, place de l'?glise - 30730 Montpezat Site : https://www.microlinux.fr Mail : info at

Hello I got about 20 different people using 20 different PC''s in my Lan. Five of them should have unrestricted access to the internet any time of the day. Yet the rest of them should only have access at certain timeframes during the day. Two of them should have no access at all. I am well experienced in writing rules (for the rules file) that make all this possible, yet i was

In article <dafd6c5f-9676-c4da-8761-619d6f003525 at microlinux.fr>, Nicolas Kovacs <info at microlinux.fr> wrote: > Le 01/10/2019 ?? 09:05, Liam O'Toole a ??crit??: > > [...] > > > > FWIW, the current release has squidguard 1.6 > > https://packages.debian.org/source/stable/squidguard > > And this all begs the question: who's flying this plane?

Le 06/03/2018 ? 18:48, hw a ?crit?: > And how do you get a list of IPs from which data could be retrieved > which the students are not supposed to see? > > How is this done anyway, does the government give out a list of URLs > or IPs which you are required to block?? If not, what if you overlook > something? Here's some information.

On 9/18/2017 10:03 AM, Nicolas Kovacs wrote: > This year the school's director wants to completely block Internet > access for all the student's personal devices. MAC addresses can easily be forged, IP addresses can easily be changed, none of that is secure if its on the same network segment The student's personal devices should be on a completely different 'guest'

Le 08/03/2018 ? 11:30, hw a ?crit : > The government says you must use squidguard to filter something? The law in France (Code P?nal, article 227-24) states that a public network is not allowed to broadcast messages containing violence, pornography or any content contrary to basic human dignity, which is theoretically punishable with three years of prison or a 75.000 ? fee. So any network

Hi, Our local school has recently acquired an HP PageWide Pro 477 professional printer. According to HP, the printer requires HPLIP 3.16.3 at least. Unfortunately, CentOS is only shipping HPLIP 3.15.9. So I downloaded and installed the hplip/hplipfull package from the HP site. Installing this thing and getting it to work is not exactly a trivial task, as I documented in my blog:

On Thu, 8 Oct 2020 at 17:50, Nicolas Kovacs <info at microlinux.fr> wrote: > Hi, > > This is probably a bit OT, but here goes. > > I've been running our local school's mail server since 2013, with mail > addresses for school staff and some teachers. The server is running CentOS > 7 > with Postfix and Dovecot, and it's a nice no-bullshit configuration with

> > Of course, to be fair, there may have been a *reason* for not doing it > that way before.... > Between the early 1990's and early 2000's the price of a GB of memory went from ~$100,000 to ~$1000*. I guess a lot of the design decisions made for things like init were focussed on this. In 1995 is was common for server platforms to have 32Mb ram whereas the kernel alone in my

Hi, Two weeks ago I migrated all our local school's servers and clients from Slackware 14.1 to CentOS 7. Everything went perfectly, and now I'm busy sanding down some edges. The previous installation sported pdftk and a frontend (can't remember the name) which allowed some basic operations on PDF files such as splitting and concatenation. The school's staff used this application

Hi, I'm currently moving all our local school's desktop clients from Slackware 14.1 to CentOS 7 + Xfce. Right now I'm fine-tuning the default user profile. I have a problem with XScreenSaver. The application per se works very well. Only there's a hard-coded pop-up window that reminds the user that he's not running the latest version. So, if I'm running version 5.36 as

Hi, I've been running Squid successfully on CentOS 7 (and before that on 6 and 5), and it's always been running nicely. I've been using it mostly as a transparent proxy filter in school networks. So far, I've only been able to filter HTTP. Do any of you do transparent HTTPS filtering ? Any suggestions, advice, caveats, do's and don'ts ? Cheers from the snowy South of

Hi, I have a few identical Dell Optiplex 7010 machines that I want to use for our school's computer room. I tried to clone these installations (like I did before on CentOS 5 and various versions of Slackware), but this time I ran into a problem. Here's what I did. 1. Install one computer and zero unused hard disk sectors with dd. 2. Send the image to a local FTP server using G4L