Restricting a user's internet

Questions about applications and software
Forum rules
Before you post please read how to get help
Post Reply
gmakka
Level 1
Level 1
Posts: 5
Joined: Thu Jan 31, 2013 6:17 am

Restricting a user's internet

Post by gmakka » Wed Apr 13, 2016 1:38 am

Hi there,

Each of my kids user accounts are time limited using timekpr, the computer kicks them off after a period of time.

What i would like is a separate user/login that they can all use at any time of the day so they can do their online learning. So i want that user to only have access to x,y,z websites. So effectively creating a white list of allowed websites for only that user can access.

Does anyone have any suggestions to how i might achieve that?? I thought about doing it in the hosts file but i found that it would then restrict it for all the users, not just a particular one.

Thanks
Grant

User avatar
capivara
Level 3
Level 3
Posts: 188
Joined: Fri May 09, 2014 2:49 am
Location: Almere, Netherlands

Re: Restricting a user's internet

Post by capivara » Wed Apr 13, 2016 1:58 am

On a system level this will be hard to achieve. Maybe even impossible, not sure.

Maybe this Firefox add-on is what you are looking for: https://addons.mozilla.org/en-US/firefo ... con-latte/

"ProCon can filter any kind of material (pornography, gambling, hacking, cracking, etc...), it can also block all traffic, making sure that only desired websites (those in the whitelist) can be accessed. It also includes a profanity filter."

If every kid has its own account on the system, they also have their own environment and Firefox config. By using this add-on I expect you to be able to fine-tune the whitelist for each kid.
All my computers are in Mint condition.

User avatar
LinuxJim
Level 5
Level 5
Posts: 659
Joined: Tue Jan 26, 2016 8:01 pm
Location: Oregon, USA

Re: Restricting a user's internet

Post by LinuxJim » Wed Apr 13, 2016 2:24 am

Kids can be very crafty - it is easy to defeat or disable web browser add-ons.

Another solution would be a proxy server, but it would need to be outside the computer (effectively intercepting all DNS traffic - otherwise, the kids could bypass it just as easily as a browser add-on).

The answer and complexity depend on your judgement of the 'trustability' of the kids.

gmakka
Level 1
Level 1
Posts: 5
Joined: Thu Jan 31, 2013 6:17 am

Re: Restricting a user's internet

Post by gmakka » Wed Apr 13, 2016 5:32 am

HI

Linux Jim, I do have a debian server, so i could setup a squid proxy and run traffic thru it instead? Does squid do per user authentication?

I will have a look at the firefox plugin, seems a good idea.. i don't imagine they will go trying to uninstall it, they are all below teenage years :)

I did wonder about writing a small bash script which activates when their "time" is up, so that it wrote to the host file effectively only letting them go to their whitelisted sites. Once they log out the script then re-writes the host file back to normal. The only downside to this i can see is if one child happens to leave themselves logged in, the internet then becomes useless for the others... not too bad i guess.

Thanks for the suggestions

RadoslavCap
Level 1
Level 1
Posts: 16
Joined: Wed Mar 09, 2016 1:51 pm

Re: Restricting a user's internet

Post by RadoslavCap » Wed Apr 13, 2016 2:50 pm

gmakka wrote:Hi there,

Each of my kids user accounts are time limited using timekpr, the computer kicks them off after a period of time.

What i would like is a separate user/login that they can all use at any time of the day so they can do their online learning. So i want that user to only have access to x,y,z websites. So effectively creating a white list of allowed websites for only that user can access.

Does anyone have any suggestions to how i might achieve that?? I thought about doing it in the hosts file but i found that it would then restrict it for all the users, not just a particular one.

Thanks
Grant
Take a look at opendns.com and personal section.

User avatar
LinuxJim
Level 5
Level 5
Posts: 659
Joined: Tue Jan 26, 2016 8:01 pm
Location: Oregon, USA

Re: Restricting a user's internet

Post by LinuxJim » Thu Apr 14, 2016 2:33 pm

gmakka wrote:HI

Linux Jim, I do have a debian server, so i could setup a squid proxy and run traffic thru it instead? Does squid do per user authentication?
I believe it does, but I'm not very familiar with squid. The key is to get the control point out of the computer so that all traffic on your local net goes through it to get to the Internet. Otherwise, there will always be a way to bypass an internal control and connect to the direct (unfiltered) route. It may indeed be overkill for your kids, but they will be teenagers at some point. ;)

ivan-the-idiot
Level 2
Level 2
Posts: 96
Joined: Thu Feb 25, 2016 9:59 am

Re: Restricting a user's internet

Post by ivan-the-idiot » Fri Apr 15, 2016 11:22 am

Yes, squid can do per-user authentication as well as deny all traffic adn then whitelist other sites

gmakka
Level 1
Level 1
Posts: 5
Joined: Thu Jan 31, 2013 6:17 am

Re: Restricting a user's internet

Post by gmakka » Fri May 06, 2016 9:44 pm

Hi guys,

Thanks for the ideas.

So i installed squid on my server, and whitelisted just their educational websites. Created a login for them and changed the network proxy for that login to point to the squid proxy server.

That works well, the only downside to this that to change it back, all they have to do is know where the proxy setting is (under the network settings), and then that account has open access to the internet.

So - if i could lock down that, so that user couldn't change the proxy setting for their login, then i'll be all good. But since they don't know how to do that i doubt it'll be a problem, i was just mentioning that for people that perhaps might see this thread in future.

User avatar
ganamant
Level 4
Level 4
Posts: 383
Joined: Sun Mar 29, 2015 4:08 pm

Re: Restricting a user's internet

Post by ganamant » Tue May 10, 2016 3:00 am

@gmakka

What you want to do is to put a server with two network interfaces between your router and the LAN your kids access the internet from. Install Privoxy on that server and let it handle all the traffic between the LAN and the outer world. I'm not a Privoxy expert, but i'm pretty sure it can be configured to do what you need.

You said you have a Debian server: that would be perfect: just add a NIC to it.

User avatar
phd21
Level 19
Level 19
Posts: 9296
Joined: Thu Jan 09, 2014 9:42 pm
Location: Florida

Re: Restricting a user's internet

Post by phd21 » Tue May 10, 2016 2:35 pm

Hi "gmakka",

Here is a post on "Timekpr" with a current link to their newly updated software that I received in my email today.
viewtopic.php?f=47&t=221011

You might try "Gnome Nanny" which can do what "timekpr" does.
https://wiki.gnome.org/Projects/Nanny

Hope this helps ...
Phd21: Mint KDE 18.3 & 19, 64-bit Awesome OS, Ancient Dell OptiPlex 780 Core2Duo E8400 3GHz,4gb Ram,256gb SDD, Video: Intel 4 Graphics, DVD Lightscribe. Why I use KDE?:https://opensource.com/life/15/4/9-reasons-to-use-kde

gmakka
Level 1
Level 1
Posts: 5
Joined: Thu Jan 31, 2013 6:17 am

Re: Restricting a user's internet

Post by gmakka » Thu May 12, 2016 7:07 pm

Hi phd21,

The Gnome nanny project looks mostly abandoned? Hasn't been developed in a few years.

Thanks for the link for timekpr tho. I like it a lot, has some limitations, one day i'll contribute and try and fix some of them.

User avatar
phd21
Level 19
Level 19
Posts: 9296
Joined: Thu Jan 09, 2014 9:42 pm
Location: Florida

Re: Restricting a user's internet

Post by phd21 » Thu May 12, 2016 8:48 pm

Hi "gmakka",

You are welcome.

I do not know if "Gnome Nanny" (Nanny) has been abandoned or not, if it is being maintained or updated, or if there is a "Fork" of it like with "TimeKpr", but supposedly it works, and works well, so you might consider trying it too. Sometimes there are certain programs with certain functions that work so well, there is no need to keep updating it, unless the operating systems force an update. It is in the Software Manager or Synaptic Package Manager (SPM).

Good luck, and let keep us posted on your progress with it.
Phd21: Mint KDE 18.3 & 19, 64-bit Awesome OS, Ancient Dell OptiPlex 780 Core2Duo E8400 3GHz,4gb Ram,256gb SDD, Video: Intel 4 Graphics, DVD Lightscribe. Why I use KDE?:https://opensource.com/life/15/4/9-reasons-to-use-kde

Post Reply

Return to “Software & Applications”