how to lock down individual users from setting a proxy server. Its a server not a WS so it should never go to the internet. I want to lock down the system side and firefox 5 settings.
View 14 RepliesI installed Pessulus on my workstation and I'm not able to lock other users profiles? I see the little wooden shield when I click on them, excpet it isn't blocking anything?
View 1 Replies View RelatedI was willing to create proxy in between the web app. and MySQL database so that I can do some modification before sending the query to the DB. But how to grep the query in the middle isn't working in the head yet. I found a tool named 'greensql' which captures the query in the middle but couldn't get how they are doing it.
View 4 Replies View Relatedis there a way to lock an individual cell in libreoffice? I can lock/protect a whole document or sheet, but can for the life of work out how to lock an individual sheet.
View 4 Replies View RelatedUbuntu 10.10 Server is loaded. Openssh has been loaded.
I have multiple users which need access to server via ssh.
My impression from reading about ssh is that a key needs generated for each person. Thus, each key will have a passphrase that is unique to them.
In /etc/ssh/sshd_config, the default sshd_config suggest using:
%h/.ssh/authorized_keys
My assumption is %h is a variable that will allow the current user to use the public key stored in his home directory under the .ssh folder in a file called authorized_keys. Is their a command string that automatically populates the authorized_keys file?
I am surprised that even though there are a number of hidden (e.g. .****) files located in the home folder, there is not one automatically generated as .ssh. It appears I have to create that directory myself. I am especially surprised by this since it appears the instructions for generating a key seems to load the key in the home directory instead of proceeding to create a .ssh folder to store the keys in.
It is not clear, but it appears that the public key needs to be copied or appended to the authorized_keys file, but, using the scheme above, the public key needs to be copied or appended to each users authorized_keys file instead of appending all public keys to a single authorized_keys location.
It then appears that each persons authorized_keys file needs permissions set to 600.
It also appears that if I decide to use RSA instead of DSA, I would do the same thing above but would use authorized_keys2 file instead.
Why doesn't the home folder which gets automatically set up for each user automatically get a .ssh folder generated? i.e Why does it have to be created by hand? Does it need the same permission on the .ssh folder? ie 600?
My aim is to allow many to log on via ssh simultaneously and then allow many to simultaneously vnc into their respective gnome desktops.
i have squid 2.6 server running on rhel5. by default teamviewer access is deny. i want to allow access of teamviewer but not getting.
View 4 Replies View RelatedThis is my quest: i need to install a box with a proxy server where useres can login, register what those users have been doing on-line and generate a dailly activaty report... I have been googleing for days and so far a tried out zeroshell (no reports) and untangle (no login)...
View 6 Replies View Relatedgauge when the server is getting overloaded with users. At present I run the server mainly as a proxy server with about 100 users. The bandwidth at the data centre is 100Mbps connection with total bandwidth used last month = 17431.16 MB I would like to add a VPN in future but feel that this might overload the bandwidth as instead of it just being web traffic it will the entire client TCP connections. I would like to monitor this before it gets to the stage where users are complaining but not sure how to gauge whether the proxy is being overloaded. It is used mainly for video traffic.
View 11 Replies View RelatedI followed this guide: [URL] and restart the Squid Server with no errors but when I try to SSH into it:
Code:
ssh -L 8080:squidserver:8080 user@squidserver
It just hangs there for a long time, not timing out and eventually (after a long wait) I get this:
Code:
ssh_exchange_identification: Connection closed by remote host
What could be the problem? I can SSH normally into the computer, but not into the proxy server. Do I need to forward the 8080 port on that network?
I wish all of my Internet connections will go through a proxy server. HTTP as well as FTP, and every other type of link. How can i do that?
On top of that, is there a free ubuntu-users' public proxy list?
I used windows OS and installed Ubuntu 10.04 (amd64) in separate partition and works well but had a problem in internet connectivity. Likely reason may be the proxy setting that we used in college (currently). I used this commands to set up the IP address and gateway.
ifconfig -a | grep eth
"eth0"
sudo ifconfig eth0 192.168.5.209 netmask 255.255.255.0
[code]....
Then I manually set the proxy setting of HTTP which is given as proxy server 192.168.5.2 and port as 8000, further more there is a wins setting which is 192.168.1.178, really don't know where to put this number.
I have to set up a proxy for my work's network. No computer except the proxy has a direct internet connection. The proxy will NOT be transparent so it authenticates with Active Directory and allows or denies pages. The squid proxy is up, and working accordingly, denying and allowing what's needed to who's needed. BUT! Thunderbird and Outlook didn't work, so in less than 10 minutes I was forced to fall back.
I read googling a lot, and searching a bit here about socks, which seems to be what I need but also that squid is already a socks proxy. Web pages were the concern, it's not needed that other stuff is authenticated, it might as well be transparent for Outlook, Thunderbird and other programs *for example, it's not needed to block a Warcraft III game, though, allowing it explicitly is not the point either* but as of now, none can connect *haven't actually tried Warcraft though, but stuff like Adobe's updater didn't work either and I recall someone mentioned Windows Live messenger didn't either* The Squid Proxy is a CentOS.
I have configured the proxy server. I want to observer users's download information. What should I need to do? Shall I install squint? what is the process? How do I monitor the users?
View 1 Replies View RelatedIm trying to set up a Proxy server on my CentOS server and I have been looking at Squid, however I wondered if there is a proxy server that will support having authenticated users and passwords in a MySQL database?I wanted to do this so I have good control over who is connected through my proxy.
View 6 Replies View RelatedWhile I'm a fan of Gnome, I'd prefer if the user "kids" logs in as KDE by default. Is there any way to toggle which desktop environment it automatically logs in to?
View 1 Replies View RelatedI am wanting to startup some programs when I first login with a certain user, but I don't like using KDEs builtin autorun system as I have to go through menuust to edit my programs. Is there not a rc.local for each home directory
View 5 Replies View RelatedI am using Centos 5.4. sending e-mails through our network(LAN).i want to create a e mail address's for each user and wants to give facility to sending,viewing,replying & forwarding office e-mails
Note : we dont have a DNS server in our LAN.
I my office I have configure dhcp in my centos sever
eth0 for adsl-setup
eth1 for lan 172.16.0.4
I am using squid proxy server for internet access,
in my office all are using laptop through wifi , so i need to configure the browser proxy setting for accessing internet.
is there any way to setup automatically get the proxy setting as dhcp. I have tried transparent proxy but no success.
I'm using a multiple monitor setup, and I'd like to use a different wallpaper on each monitor. The default background selector, however, puts the same picture on every monitor. I've tried the application 'nitrogen' from the repositories which claims to be able to do just that, but it doesn't do anything.
View 1 Replies View Relatedsetting up multiple (2-3) FTP users on Ubuntu Server 9.04 I currently only have ONE FTP user, but I need to have 2.
View 1 Replies View RelatedIn our organization there are around 1000+ users are using mails. The mailing system is implemented under RHEL using postfix and dovecot. For user based quotas i have implemented Disk Quota. But the problem when i want to edit quota for multiple users with similar limits i'm doing "edquota user" for every users. It seems very difficult. Now I wanna know:
1. Is there any way to edit quota value for multiple users at a single shot?
2. Also there is any method to send alerts mail to the end users on disk utilization?
i am using RHEL 5. i configured proxy server. now i want block one website.
View 2 Replies View Relatedis someone can guide the best open source tools to monitor as webbase,gui,shell prompt
View 1 Replies View RelatedI have setup a squid server on Rhel5.4. I would like to know how I can configure my squid server to block anon proxy sites.
View 3 Replies View RelatedI don't care so much the practicality and needlessness of actually setting up a computer for proxy server for personal usage, but none-the-less, i want to do it, and i'm just wondering about hardware.The proxy, i don't intend on having a desktop environment, so it'll be a terminal interface.But for a system that will handle traffic for 3 pc's and a ps3, how much hardware would one suggest i need, as far as RAM, HDD space, so on and so forth.
I was thinking it would be fun to do with with my old amd k6-2 processor and it's 32mb of ram, but in order for that pc to work, i'll need to replace a few hardware pieces, and before i dumb money into it and pull it out of the closet, i want to find out if it would even be worth my time to do it.
As per our requirement, I need to implement a Secure FTP server for around 500 users which includes security level on both - Transfer and Rest data. Apart from this I also need the following features -
1. Size quota on Users & reminder mails for the same
2. Password expiry notifications and user interface to change their password within specified time interval
3. Aging of data - After specified time, data will be moved to some other location from their home directory
4. All type of log maintenace for each file and user and log exporting
5. Uploading & Downloading speed consistency as per server level.
6. Read-write interface for user and read-only interface for their client for the same account.
7. Backup and Recovery options.
As of now, I am using VSFTPD which does not give these much of features in combine.
As part of the project I'm working on, I need to set up a server with IPSec authentication only connections to a large number of low bandwidth clients. I'm making use of the PF_KEY interface to populate the keys on the server and while prototyping things I've found that the initial setup is taking longer than I had expected. At the start of my test, entries are being added to the database at a rate of around 30/second, but as time goes on this is dropping significantly. I ran a test up to around 100k entries and by then the rate had dropped to 10/second. It's key to me that if I reboot my server that the Security Associations can be repopulated in a very short period, so I do genuinely need this to be much faster.
Two questions:
1) Does anyone have any experience of running with a large number of SAs set up, and if so what sort of setup rate did you get?
2) Are there things I can do to speed up the provisioning of these SAs? I'd really like to see a rate in the thousands per second.
We've been doing the prototyping on the 2.6 kernel.
I want to create a shared folder in a ubuntu sistem but I want to know if I can get access to some users of my domain active directory windows 2003 server?If I can, I would give that security in some of the subfolders of that shared folder as explained at the example:XAMPLE:
Backups (all have access and it's shared)
Mail of Charles (Can only have access Charles that have an account on domain)
Mail of John (Can only have access John)
[code]...
I am using squid proxy server for sharing Internet in my internal network. I would like to know that how can I check the browsing history by individual users web surfing history by their IP addresses?
View 1 Replies View RelatedI recently set up a ftp server in my house running a dyndns service so I can get to it from the outside. I called my isp to get some help in setting up the router to forward port 21 from the outside to that box, and in short we had some problems. Long story short, they ended up bypassing the router itself, and now the line running to the box is its own fixed external ip. Naturally I want a pretty darn good iptables setup for this. The box runs proftpd and so far my iptables only accepts local loopback and port-21. (I left port 80 closed as its only purpose is to be a standalone ftp server) But I know there must be a safer rule for port 21, as right now its just wide open. Anyone have any ideas on how to make this a bit safer? Also would that command be fine for any of the linux machines im connecting to it from the outside too?
View 3 Replies View Related