[ale] Proper squid wiring

[Gary S MacKay]

Thanks Dow! I'll mess around with that idea. One question, why three nic's?
One to the inTERnet, one to the inTRAnet, and the other one? They do not
need a dmz or anything, just a method of stopping abusers from wasting
company bandwidth.

- Gary


Dow Hurst said:



> Your on track for the topology.  I'd suggest using a couple of switches
> instead of one hub and then putting three Ethernet cards in the Linux
> squid/firewall.  You won't limit bandwidth coming from the connection
> with switches.  You can split users into different groups governed with
> more or less limiting firewall rules base on business needs.  You
> should have a very reliable machine with good quality hardware, not a
> castoff old machine, for the squid server since squid will have disk
> I/O and CPU requirements for good performance and will be in effect a
> part of the network infrastructure.  I am no expert but there is my
> $0.02.
> Dow
>
>
> Gary MacKay wrote:
>>
>> I think I know how this goes but wanted to check with the "experts"
>> before I get too far into it. I have a client with a wireless internet
>> connection. The ISP installed a Netopia R910 router which plugs into
>> the wireless receiver and into the hub that serves the internal
>> network. The owner wants me to limit internet access on a per person
>> basis. My thought was to install a linux/squid box between the hub and
>> router to allow/block/cache traffic. The added bonus for everyone is
>> the cache in squid, but the main purpose is to monitor/limit certain
>> users who are abusing the privilage.
>>
>> Any thoughts?
>> - Gary
>>
>> ---
>> This message has been sent through the ALE general discussion list.
>> See http://www.ale.org/mailing-lists.shtml for more info. Problems
>> should be sent to listmaster at ale dot org.
>
> --
> __________________________________________________________
> Dow Hurst                   Office: 770-499-3428
> Systems Support Specialist  Fax:    770-423-6744
> 1000 Chastain Rd.
> Chemistry Department SC428  Email:dhurst at kennesaw.edu
> Kennesaw State University         Dow.Hurst at mindspring.com
> Kennesaw, GA 30144
> *********************************
> *Computational Chemistry is fun!*
> *********************************




---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.