[cloudzz4u]

hi,

i am a newbie to this forum. I require help regarding the setting up of

a proxy server on linux.

I have a cybercafe, where i run 13 machines. every now and then the

network becomes slow due to spyware and adware.

One of my friend had given me this web address.

I wanted to setup a linux based proxy server where the other 12

machines are windows run os. will that solve my problem of the adware

and spyware.
or any ideas please post.
kindly please help me.

bye
prasad

[Triple6]

We've closed your duplicates, please continue this at this thread.

[Squashman]

I doubt it. The only thing a proxy server is going to do it allow you to block what it coming in and out of your network. And block where they can surf on the Internet. If you are running a Cyber Cafe with your own computers you may want to look at setting up a program on your Cafe computer called Deep Freeze.

Microsoft also has a program called the Shared Computer Toolkit which may help.

[O111111O]

You need a few things to do this with Linux, but it is perfectly doable.

RSBAC and SQUID, an Antivirii app for your SQUID/RSBAC box, maybe a ICAP filtering program too if you're interested.


RSBAC will allow you to create rulesets in conjunction with Iptables to limit the type of traffic allowed, and will allow you to combine with SQUID to force use of proxy, and to scan downloaded/web content for malware before it reaches the client.

SQUID is simply a proxy, it's framework along with RSBAC that'll allow you to accomplish this.

http://www.rsbac.org/why

http://www.squid-cache.org/

----

The concept is that your Linux box would act as DHCP server for your network. Host machine would first receive an isolated IP address, and would be forced to authenticate through webpage provided by RSBAC. Once user authenticates, the system isnt' isoloted. However you can use rulesets to force users to use Proxy server. Proxy gives you ability to cache frequently used content (speeds up Internet), and will give you the ability to pass traffic through DAX inside RSBAC. WIth this you can pass transmitted data through anti-virii/malware software before it reaches your host.

Also, you can use SQUID to manually block objectional websites, or subscribe to something like BlueCoat to filter this as well. [Another bonus, filter category companies typically have categories and classify sites that carry malware, etc.]

Now having said all of that, initial config will be fairly intensive. ALso, the candidate system that you use for this will need to be fairly beefy.

Hope this helps.