[pheidius]

K sounds good. Do you know a good tutorial in setting it up as the gateway. I may be confusing things but I have thought until now that a gateway was the same thing as the router. ty for helping me work through this.

[pheidius]

I assume so. My OS X server 10.4*(ppc tower not xserve) sits behind a router which which gives my EN 1 nic a dhcp assigned address. This provides me with unfettered internet access other than a weak net nanny whitelist /blacklist proxy nanny. I want to use my second nic to totally control access to the internet for my students in a school classroom. The rest of the school is on a PC SBS domain. The internal school security is so weak that the kids can go anywhere they want by using external proxy servers and even get into the intranet /teacher’s folders etc. I want no part of that. They have absolutely no self control which means the school’s lab are worthless for any productive school work. So my ideal is to be able to have my server be the router and give them all a permanent ip address so I can use ARD. I also do not want the wrath of the PC cretin admins coming down on me by putting out any false dhcp calls. Now, there are about 5 external server based educational software packages that we lease rights to and those are the only places I want them to be able to go. So my idea of having my server be the proxy, I hope, will prevent them from going anywhere else no matter what they type in. I do not think that any of them would be knowledgeable enough to install tunneling software/or take advantage of built-in OS X server VPN capabilities though I will be controlling USB/firewire hardware access. So maybe the first real question, before I look for a tutorial is, “am I right?” If I set my server up as my lans primary proxy server on en1, can I set only the sites that are allowed and have all others blocked by default. Those are my needs. I would definitely not want them to have ftp backdoors though as well. So if one can accomplish these things the best with an http proxy server then yes I want http. If not ,then please advise.
Thanks

[pheidius]

hiii,

Never mind. I figured this one out.

[pheidius]

My network is a school LAN. All the other machines in the building are PC’s and are on a Windows Server domain. They are all loaded up with so much security software that they are virtually unusable. My Mac has access to the internet without any security software loaded on it. I do not have access to the domain, therefore, but I don’t need or want it. So I am sitting behind a router that is dishing me an IP via a DHCP lease. The connection is cat 5e out of the wall jack. The only limitation is that there is a net nanny proxy server somewhere behind the router. As far as identifying my machine, I call it Kserver while my clients are just numbered i-mac 1-25. I had also thought of the port 80 approach but the nuance of what I need is this. As I teach. I want to have my students as a whole not to have access to the web in general. The reason for this is that they will not do any work if they do but will only constantly try to surf to places they shouldn’t be. In a normal school, this would just be a simple discipline issue, but this is an inner city school where not only is there no normal but any attempt to impose discipline beyond anything you do in your own room puts you on the “you are a bad teacher track.” So what I need, ideally, is a way to randomly bring them live to go to web sites in quick bursts right at the same time as I need it but at essentially unpredictable times in a given lesson. Some days I would never give them access, others I might for short bursts. I want to have continual assess for the server though as it is also my presentation station for my projector and big screen. That is why I wondered if there was some kind of script I could initiate from the server that would tell all clients to close down or open up port 80 with one push of a button and/ or click of a mouse. The unpredictable timing of this is why I didn’t think a proxy server would work but then again, as stated above, i am a novice admin.

[Author]

Posts