From: Antony Stone <Antony@Soft-Solutions.co.uk>
To: netfilter@lists.netfilter.org
Subject: Re: Rules for Blocking Proxies...
Date: Tue, 20 Apr 2004 08:35:59 +0100 [thread overview]
Message-ID: <200404200835.59747.Antony@Soft-Solutions.co.uk> (raw)
In-Reply-To: <000b01c426f6$cc216f10$36b4fea9@SABNANIS>
On Tuesday 20 April 2004 5:44 pm, Harry wrote:
> Hi All,
> I am running Fedora and Redhat 9 on two servers at my Cybercafe, connected
> on two Hi speed Lines, I have a decent firewall script, but these days I am
> facing issues about people changing the Proxy settings in order to get thru
> porn sites, can anybody suggest some rules which I can implement in the
> script that avoids connection to these servers? Suggestions are welcome.
The firewall should allow connections to remote web servers (ie TCP --dport
80, 8080 etc) from the proxy server's IP only.
Don't allow any other IP address in your network to connect to an external
address on dport 80.
Regards,
Antony.
--
"The problem with television is that the people must sit and keep their eyes
glued on a screen; the average American family hasn't time for it."
- Report in the New York Times, following a demonstration at the 1939 World's
Fair.
Please reply to the list;
please don't CC me.
next prev parent reply other threads:[~2004-04-20 7:35 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-04-20 16:44 Rules for Blocking Proxies Harry
2004-04-20 5:50 ` Rio Martin
2004-04-20 7:35 ` Antony Stone [this message]
2004-04-20 13:35 ` Alexis
2004-04-20 13:47 ` Ray Leach
2004-04-20 13:53 ` Antony Stone
2004-04-20 14:23 ` Alexis
2004-04-20 14:27 ` Alexis
2004-04-20 14:37 ` Antony Stone
2004-04-21 23:39 ` Harry
2004-04-28 17:34 ` Rules for Blocking Proxies...THANKS !! Harry
2004-04-28 6:53 ` Rio Martin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200404200835.59747.Antony@Soft-Solutions.co.uk \
--to=antony@soft-solutions.co.uk \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.