From owner-freebsd-questions  Fri Apr 10 23:49:09 1998
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id XAA17203
          for freebsd-questions-outgoing; Fri, 10 Apr 1998 23:49:09 -0700 (PDT)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: from gdi.uoregon.edu (gdi.uoregon.edu [128.223.170.30])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id XAA17179
          for <freebsd-questions@FreeBSD.ORG>; Fri, 10 Apr 1998 23:49:02 -0700 (PDT)
          (envelope-from dwhite@gdi.uoregon.edu)
Received: from localhost (dwhite@localhost)
          by gdi.uoregon.edu (8.8.7/8.8.8) with SMTP id XAA28699;
          Fri, 10 Apr 1998 23:49:00 -0700 (PDT)
          (envelope-from dwhite@gdi.uoregon.edu)
Date: Fri, 10 Apr 1998 23:49:00 -0700 (PDT)
From: Doug White <dwhite@gdi.uoregon.edu>
Reply-To: Doug White <dwhite@resnet.uoregon.edu>
To: Edward naillon <enaillon@nvinet.com>
cc: freebsd-questions@FreeBSD.ORG
Subject: Re: Packet Filter for High School
In-Reply-To: <01bd64af$b41a0360$0100a8c0@server.ior.com>
Message-ID: <Pine.BSF.3.96.980410234821.28437j-100000@gdi.uoregon.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

On Fri, 10 Apr 1998, Edward naillon wrote:

>  We have installed a linux proxy/cache server that filters out
> innapropriate internet sites from our students. The problem is that we
> have no packet level enforcement. Students can go around this server and
> straight to the internet. Our State ISP is being stubborn about
> modifying our wellfleet router to allow only packets from our proxy
> server (and several select workstations) to pass. Can I do this with a
> freebsd system? All it needs to do is deny any ip addresses from passing
> that are not in an allowed list.  Thanks in advance for any ideas.  Ed
> Naillon

Absolutely!  FreeBSD comes with ipfw, a IP packet filtering tool.  You
could probably run your proxy on the FreeBSD box too.

Doug White                              | University of Oregon  
Internet:  dwhite@resnet.uoregon.edu    | Residence Networking Assistant
http://gladstone.uoregon.edu/~dwhite    | Computer Science Major



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message