Newbie Servers

[MonthOLDpickle]

Well don't want to pay out for a Windows server..never really used one. But I figured if I could get a linux based one set up..it be all good.

First of all. It will be internet>Server & Printer>Router w/ Switch>other computers


Right?

Than how good is it with everything else being MS OS?

[Rubberman]

Linux servers have no problems dealing with MS Windows PC's when used for web, file, and print servers as well as internet gateways/routers/firewalls/switches - they are used extensively for such tasks. That isn't to say that there is no or little work to do to set them up for all these tasks since these server applications aren't "plug and play", so to speak.

[MonthOLDpickle]

So I guess no need for a server than.

Just go

Internet>Router>Switch> Other comptuers (one with no monitor used as storage & Print sharing)?

[Rubberman]

Well, as far as switches are concerned, a small commercial gigabit or Fast ethernet switch w/ 8 ports is going to cost you about $50 USD, which is less than you'd pay for a 4-port ethernet card for your server. As a gateway, router, firewall, file and print server though, recycling an old PC, provided it has enough resources (CPU, RAM, etc) can't be beat!

[MonthOLDpickle]

Well the thing is we will have more than 4 computers. And the only reason why I thought of a server is I need a way to be able to block certain websites on certain computers and monitor all computers on a network. I don't know if a server does this but thats my assumption.

[Rubberman]

Well the thing is we will have more than 4 computers. And the only reason why I thought of a server is I need a way to be able to block certain websites on certain computers and monitor all computers on a network. I don't know if a server does this but thats my assumption.

Ah! Trying to keep the kids out of trouble? This is harder than you think. Yes, you can set up black lists in a firewall on your server, but kids are nothing if not resourceful - they will find a way around that PDQ, in my experience. If you have taught them suitable values and a sense of propriety, then while they might explore and find places they shouldn't go, they won't revisit them as they might if they think it is "forbidden fruit". For really young ones, you need a more hands-on approach, in my experience, at least until you are confident that they will avoid less savory sites.

As for the adults in the group, then you need to simply let them know what is and is not acceptable use. Trust goes a long way to achieving your ends in this sort of situation.

[MonthOLDpickle]

So I should get a server? I forgot to mention this is for the work place. We are currently moving to our own office..and I have the most experience with technology. Network wise, I've only dealt with small home networks with just sharing.

The boss has asked me to block specific sites and to monitor every computer.

I really don't know how to do this server thing with linux. I've only touched Fedora and Ubuntu.

I have also googled..but its just gibberish to me. I need it simple server that can just do what I want.

[Rubberman]

So I should get a server? I forgot to mention this is for the work place. We are currently moving to our own office..and I have the most experience with technology. Network wise, I've only dealt with small home networks with just sharing.

The boss has asked me to block specific sites and to monitor every computer.

I really don't know how to do this server thing with linux. I've only touched Fedora and Ubuntu.

I have also googled..but its just gibberish to me. I need it simple server that can just do what I want.

Thanks for the clarification. I don't suppose your boss has any idea what he is asking you to do? Yes there are black-lists that can be applied to Linux firewalls. Yes you can log all external sites visited. Why? Doesn't he trust anyone? To do this well, you really should be using a commercial firewall/filter appliance because if you don't do it right (and it isn't simple to configure a server properly for all this) then you can cause serious problems with accessibility to/from the internet, VPNs, and just about everything else on your network.

So, if you (your boss) wants simple, then he must be willing to pay for that simplicity and invest in a firewall appliance and the consulting time to get it installed and configured properly. Not cheap. FYI, we didn't get to that point in a company I helped start until we were several hundred users and 10's of millions of $$ USD in revenues. Even when we got to 3000 users on 4 continents we didn't track where users were going and we didn't block their access. The cost in disc space for the log files and the time to analyze them or purchase software to analyze them in real time would have been excessive, even for the $500M company we were at the time.

As someone once said, "Just because you can, doesn't mean that you should!".

[MonthOLDpickle]

Well there is only 4 of us total..but I guess not to worry. If there is a way to block certain sites without a server and not on the computer (like running off of mine or the bosses)..I'd be all set.

[Rubberman]

Well there is only 4 of us total..but I guess not to worry. If there is a way to block certain sites without a server and not on the computer..I'd be all set.

If you were me, then I'd try to convince him that this is not really a good idea, UNLESS there is an overriding business reason to do so, such as contractual necessity to protect certain intellectual properties, you are doing national security work (in which case you REALLY need a blue-book certified system and network), or there are other legal reasons why this MUST be done. Otherwise, your best bet is to get a decent router/gateway to manage the edge of your network and its connection to the internet, and a firewall appliance that can block specified web sites and log internet activity for some period of time. I wouldn't bother trying to configure an old system to do this - it will cost more in lost time and insecurity than it saves in hardware costs.

So my recommendation on this (realize Fortune 100 companies pay me $200 USD / hour in 100 hour increments for such advice) is to forget using the old PC for router/firewall purposes and purchase the best appliance hardware you can afford, and only what you REALLY need. Your boss has a lot of wants, but I suspect rather fewer needs in reality.