What Next?

[StewartKnight]

I've created a Linux box (miracle of miracles!!) from Fedora, got Apache, MySQL and PHP working up and running. Now I've installed a helpdesk called OneorZero.

 

Not as difficult as I imagined (once I got past my stupidity, and with help from mark_wood). So, what next.

 

What do you use your linux boxes for? Is there a relatively simple project that could benefit the school? How difficult is it to get squid to control internet access in different rooms / computers?

 

Thanks for any suggestions!

[Netman]

The worlds now your oyster stewie boy!!

 

How about a bit of Moodle if you don't have it already?

[MkII]

I'm really after squid control too Stewart [if I can jump onto your boat! ]. Some linux guy was showing me the config files where you can see lots is possible - and he had actually written a web front end for teaching staff to be able to turn off and on access given any number of criteria: IP, Group, User Name, Room etc...

[StewartKnight]

I'm on with Moodle (which seems simple,as I've already got the correct servers up and running. But the internet access is one that would really be a feather in my cap. Is there a downloadable free system to control squid / t'internet?

[Geoff]

If you just want filtering try Dansguardian for Squid.

 

http://dansguardian.org/

[StewartKnight]

filtering isn't an issue, we use Securus which catches everything I want, what I'd like to do is stop the kids using the internet, when I want to stop them!

[Bisk]

We use Squid / Dansguardian to proxy / contentent filter. Room / Pc net control is by using iptables firewall and a web page with password control.

Cron task runs at lesson change to reset rooms to OFF

Only disadvantage is that to make this work we went static IP on 200+ pcs putting each room in its own subnet.

 

If someone has a way of doing this from PC name on DHCP (W2k server) it would make our lives a bit easier.

[Netman]

I know it's not Linux but have you tried Lanview3 from http://www.mst-software.co.uk

He says saving Russ or Kevin from having to post!

[StewartKnight]

Lanviewer is OK, but it takes the kids an hour to figure out that they can use Windows Explorer, instead of Internet Explorer!!!!!

[MkII]

Stewart - have you tried doing it in AD? Just make an OU and add a policy with duff proxy settings. I have a sub-OU in my student OU and PC's OU - that way I can block individuals and PC's - just drag and drop - internet off.

 

'though what I want is for staff to be able to do this - and not hassle me.

 

I have a request to have one room off the internet at regular times through the week - Monday mornings and Thursday P1. Does anyone know if you can script moving users and computers around in AD??

[StewartKnight]

already have a GP where if I move students to, they have no internet access (remove the proxy in the GP). What I'd like is a DYNAMIC way. It's alright doing it before the lesson, I'd like to do it on the fly... i.e., on a web site I don't like, ban them without them having to logon again. PLUS, ban a room for an hour (can't do this in GP yet) for example.

[ChrisH]

Censornet that I use, uses squid and dansguardian and everything is done though mac address so there must be a way you can make your own install use this method. I just dump a lease list from DHCP to get all the MAC addresses.

[MkII]

Hey cool! - didn't realise censornet did that - almost worth having a box just for that! [looking at the specs: deny access - pull usernames from Ad etc]

 

Could you make user accounts for the deny access page - that you could give to teachers?

[ChrisH]

I dont get what you mean? Do you mean to change the page?

A better version is promised after christmas but at the moment the thing which puts most people off its that NTLM is not supported currently so you get a login box when you open your browser.

 

Now I thought about it you mean allow teachers to turn rooms/machines access off? If so then there are several levels of access for teh web panel. I think there is one that would suit teachers but ive not tried it. I know others that do though.

[MkII]

Sory Chris - yes that's exactly what I meant.