[CentOS] restrict network access

2007-10-19 Thread Arne Pelka
Hi, I have two pc using centos 4, these machines need only access to the (big, class b) local network. Because of security reasons the network access should be restricted to this local network - mainly the users of these pc should not be able to access webpages outside of the local networ

Re: [CentOS] restrict network access

2007-10-20 Thread Arne Pelka
Lorenzo Quatrini schrieb: > I would setup a box with a proxy (eg. squid) and grant full internet > access only to that box. On the other boxes either remove the default > route, or block on the router/firewall internet access. > On the proxy you can easily configure proxies for other services too >

Re: [CentOS] restrict network access

2007-10-22 Thread Arne Pelka
>> Squid actually Proxy will do the trick > > Nope. Not if they are installed on those PCs. > > > Just block outgoing connections to all webservers but those that are > allowed. > > iptables -A OUTPUT -p tcp --dport 80 -d allowedip -j ACCEPT > iptables -A OUTPUT -p tcp --dport 80 -d centosm

Re: [CentOS] apache user & and list chown properties questions

2007-07-02 Thread Arne Pelka
> I am trying to chown certain directories and binaries for the Apache user. > How can I (a) find out the user Apache is using, and (b) the current owner > on a given (or group of) folder(s) / file(s)? (a) /etc/httpd/conf/httpd.conf - should be apache as user and as group (b) for the content of t