Network filtering

[Spearball]

Are there any programs that will protect/secure my network and filter out unwanted sites from users browsing the web? Such as block them from playing games, p2p networking. etc. I have this built into my router but it isn't really too user configurable.

[jlreich]

A 'web filter' is what you are looking for. There are several out there, but I have never used any with the exception of Norton parental control many years ago now. Do stay away from that, it is a major resource hog. ;)

There is a free one that I hear is pretty decent, but I can't seem to remember what the name is at the moment. :(

Google "web filter" and I am sure you will find many choices.

[Spearball]

Alright thanks jlreich. Just wondering since im already setting up a web filter server, how can i set up the server so that i can use it as a firewall, web filter, etc? Would it make sense to set it up like this....

Modem(Which connects to the internet) - Firewall/filter server - router/or switch - which then connects to all the networked computers.

Thanks :)

[PrntRhd]

Spearball,
You might want to consider using a PC as a proxy server. All users have to go through it to get to the Internet, and you control the sites available via the server.

[jlreich]

Yep a proxy will work.

Modem(Which connects to the internet) - Firewall/filter server - router/or switch - which then connects to all the networked computers.
Yes you want the firewall/proxy system between the LAN and internet.

[Spearball]

Alright thanks guys i just got the connection working. The proxy has vpn, firewall, web filtering, etc. I just would like to know if there is anything i have to do to secure the proxy? I know nothing can never really be "hack proof" but since that proxy for the network is directy connected to the internet doesn't that make it vulnerable from the outside(WAN)?

[yawningdog]

Look at your public interface with a port scanner and see which ports you have open. Open ports should be shut down or hardened.

[jlreich]

since that proxy for the network is directy connected to the internet doesn't that make it vulnerable from the outside(WAN)?
Hehe, that's what the firewall is for. To protect what's on the inside LAN. :p

Do follow yawningdog's advice though. Also it's a good idea to regularly look at your firewall logs to make sure there isn't anything odd going on inside the LAN.