Need firewall/proxy/gateway/URL filter

[Yudhi]

Hi guys,

I'm looking for firewall/proxy/gateway/URL filter for my company that can allow/deny user to access internet with these scenarios:
1. A group of user can access to pop3 and smtp only.
2. Deny all access to porn/advertise sites.
3. Allow a group of user to access to certain sites, but deny it to other groups.

I have tried Kerio Winroute Firewall on Windows and it has all those function and I want same features that run on Linux.

Thanks,

[cbogdan]

Try http://www.smoothwall.org/

[Yudhi]

Try http://www.smoothwall.org/

Are you really sure that smoothwall can do all those scenarios? Cause I have tried IPCop and it can not do grouping access.

Regards,

[kavalakala]

If "groups" means separate workstations with separate ip:s, it can be done with linux's iptables (which is used by smoothwall and as far as I remember, IpCop). With that you can deny access totally to defined hosts, and based on this, you can enable some ports (like 25 and 110) and give access to some hosts for defined ip:s. Maybe something kind of user/group authentication can be made, but I am not sure how to make it. But, this means raw coding of iptables rules. It's not really difficult, but needs knowledge of linux and networks. Manpages really help.

[Yudhi]

If "groups" means separate workstations with separate ip:s, it can be done with linux's iptables (which is used by smoothwall and as far as I remember, IpCop). With that you can deny access totally to defined hosts, and based on this, you can enable some ports (like 25 and 110) and give access to some hosts for defined ip:s. Maybe something kind of user/group authentication can be made, but I am not sure how to make it. But, this means raw coding of iptables rules. It's not really difficult, but needs knowledge of linux and networks. Manpages really help.

Thanks for your suggestion, a "groups" means separate users let say Personnel Dept. has 1 group that can access to certain sites, we can not separate ip because we use DHCP.

Regards,

[farslayer]

you may also want to look at http://dansguardian.org/

[kavalakala]

Well, http://www.clarkconnect.com/ ClarkConnect is also an alternative.

[Yudhi]

Well, http://www.clarkconnect.com/ ClarkConnect is also an alternative.

Is it free full version available?

[kavalakala]

Blah, you were finding software for commercial use.. I think using free version in commercial use is forbidden, but individuals can use it freely.

[kavalakala]

Yea, and the beta version is freely downloadable, but I have never experienced problems with this software.