Re: [CentOS] restrict network access

2007-10-22 Thread Arne Pelka
Squid actually Proxy will do the trick Nope. Not if they are installed on those PCs. Just block outgoing connections to all webservers but those that are allowed. iptables -A OUTPUT -p tcp --dport 80 -d allowedip -j ACCEPT iptables -A OUTPUT -p tcp --dport 80 -d centosmirror -j

Re: [CentOS] restrict network access

2007-10-20 Thread Arne Pelka
Lorenzo Quatrini schrieb: I would setup a box with a proxy (eg. squid) and grant full internet access only to that box. On the other boxes either remove the default route, or block on the router/firewall internet access. On the proxy you can easily configure proxies for other services too

Re: [CentOS] apache user and list chown properties questions

2007-07-02 Thread Arne Pelka
I am trying to chown certain directories and binaries for the Apache user. How can I (a) find out the user Apache is using, and (b) the current owner on a given (or group of) folder(s) / file(s)? (a) /etc/httpd/conf/httpd.conf - should be apache as user and as group (b) for the content of the