as it hardens, you might want to explore WireGuard for vpn. just saying,..

On Sat, Jun 29, 2019 at 1:46 PM Seth Kenlon <sken...@redhat.com> wrote:

> If I were the consultant in this situation, I'd install CentOS or RHEL on
> a well-supported server (probably not rack mountable, since I'm guessing
> they don't have a server room as such), and then install OpenVPN for the
> VPN, set up a <a href="
> https://www.redhat.com/sysadmin/secure-linux-network-firewall-cmd";>sensible
> firewall with firewalld</a>, and enable SAMBA or the file sharing protocol
> of your choice.
>
> Install Web Console (Cockpit) for them so they can look at the status of
> the machine. They'll look at it once and then never open it again, but it
> makes a good first impression.
>
> It's all-in-one because it's running on one box under one OS. I would be
> shocked if the school admins who hired you meant "all three services must
> be running in daemon, under one PID" :-)
>
>
> --
> Seth Kenlon
>
> sken...@redhat.com
> s...@opensource.com
>
> PGP(F97393A5) T(+61-735-147125) M(+64-20406-19719)
>
> redhat.com | TRIED. TESTED. TRUSTED. | redhat.com/trusted
>
> On Sat, Jun 29, 2019 at 10:51:25AM +0200, M. Fioretti wrote:
> > Greetings,
> >
> > One of my jobs in the next months will be Free Software teaching/
> > consulting for a small private school. Part of the consulting consists
> > of helping the school to evaluate how to set up some infrastructure,
> > using Linux/Free Software as much as possible.
> >
> > I have been just asked to, quoting, "suggest an all-in-one
> > NAS-VPN-firewall for the school". We are talking ~80 students in the
> > 8/13 years age range, maybe more after summer, plus teachers and
> > administration. The "all-in-one" part is the key requirement, and also
> > the reason why I am asking for recommendations based on your
> > real-world experience. I know how to handle this stuff the 100%
> > DIY/hacker way, but that is not an option in this case. Me, I wouldn't
> > mind but, while the school would like to use more FOSS also for
> > administration and internal services, actual teaching has much higher
> > priority this year.
> >
> > Thanks in advance for any feedback,
> > Marco
> > --
> > M. Fioretti http://mfioretti.com
> http://stop.zona-m.net
> >
> > Your own civil rights and the quality of your life heavily depend on how
> > software is used *around* you
> > _______________________________________________
> > users mailing list -- users@lists.fedoraproject.org
> > To unsubscribe send an email to users-le...@lists.fedoraproject.org
> > Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
> https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
> _______________________________________________
> users mailing list -- users@lists.fedoraproject.org
> To unsubscribe send an email to users-le...@lists.fedoraproject.org
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
>
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org

Reply via email to