Re: [Ltsp-discuss] Restricting Internet Access

2013-07-04 Thread Peter D Knight
If you don't succeed in 3 weeks, perhaps you could change permissions on the browser and only allow members of a certain group execute it. That will give you longer to find a better solution. If you are controlling a whole class of pupils, just put a comment in /etc/resolv.conf and deny access

Re: [Ltsp-discuss] Restricting Internet Access

2013-07-04 Thread Alkis Georgopoulos
Στις 04/07/2013 02:46 πμ, ο/η David Burleigh έγραψε: I am in the process of setting up a computer lab with Ubuntu 12.04, LTSP, and a number of thin clients. All is well, except that I cannot figure out how to deny internet access to particular users while allowing internet access to others.

Re: [Ltsp-discuss] Restricting Internet Access

2013-07-04 Thread Sprachschule Eilert
David, I'm doing this with iptables for quite some years now, but it includes an application for the teacher to set/release the lock for a class as well as some scripts to call iptables etc. And the application has to know - which user is in the class - which terminal the user is logged in

Re: [Ltsp-discuss] Restricting Internet Access

2013-07-04 Thread David Burleigh
Thank you, Rolf. I have tried a few settings with iptables, but I must be doing something wrong because it has the effect of blocking the desktop environment from being set up on the client after login. I'm sure it's because I really don't understand iptables properly. Perhaps its a matter of

Re: [Ltsp-discuss] Restricting Internet Access

2013-07-04 Thread Jakob Unterwurzacher
On 04.07.2013 14:46, David Burleigh wrote: Thank you, Rolf. I have tried a few settings with iptables, but I must be doing something wrong because it has the effect of blocking the desktop environment from being set up on the client after login. I'm sure it's because I really don't understand

Re: [Ltsp-discuss] Restricting Internet Access

2013-07-04 Thread David Burleigh
That worked! Thank you so much! On Thursday, July 04, 2013 08:06:16 PM Jakob Unterwurzacher wrote: On 04.07.2013 14:46, David Burleigh wrote: Thank you, Rolf. I have tried a few settings with iptables, but I must be doing something wrong because it has the effect of blocking the desktop

Re: [Ltsp-discuss] Restricting Internet Access

2013-07-04 Thread Lance Levsen
We do it with squid and LDAP lookups. We have a nonprod attribute that if true allows squid access out. Otherwise squid denies external connections. Alkis Georgopoulos alk...@gmail.com wrote: Στις 04/07/2013 02:46 πμ, ο/η David Burleigh έγραψε: I am in the process of setting up a computer lab

[Ltsp-discuss] Restricting Internet Access

2013-07-03 Thread David Burleigh
I am in the process of setting up a computer lab with Ubuntu 12.04, LTSP, and a number of thin clients. All is well, except that I cannot figure out how to deny internet access to particular users while allowing internet access to others. Is there a straightforward way to do this on a per user

Re: [Ltsp-discuss] Restricting Internet Access

2013-07-03 Thread Todd O'Bryan
Straightforward, no. Or at least not that I know of. This is one of my major goals for the summer, so I've been reading up about Squid Proxy and Squid Guard. It looks like they will allow you control network access based on user roles and identities. And that's as far as I've gotten. :-) School