Different IP Groups for different networks

Taking care of your Linux box.
asadsq
Lance Naik
Posts: 48
Joined: Fri Feb 22, 2008 3:10 pm
Location: Peshawar
Contact:

Different IP Groups for different networks

Postby asadsq » Mon Jan 10, 2011 11:05 am

Salam,

I want to create different IP based groups so that I may assign different settings according to that group.
For example

Group1
172.16.1.x For Officers

Group2
172.16.5.x For officials

Group3
172.16.8.x For Hostels

and so one
So according to this group settings i will allow the bandwidth, accessing of audio/video site.

So i just need help how I may configure these groups

Regards
Asad
Asad Zia Siddiqui
Peshawar

asadsq
Lance Naik
Posts: 48
Joined: Fri Feb 22, 2008 3:10 pm
Location: Peshawar
Contact:

Postby asadsq » Sat Jan 22, 2011 8:41 am

Let me add few more data

Group1
172.16.1.x For Officers

In this group i want to limit and add some restrictions along with bandwidth limitations. So that other group may not be effected with these settings

So I want to repeat this for each group with different policies/restrictions. Keeping these all factors, I need help that how to create or define these IP groups and how restrictions be added in each group
Asad Zia Siddiqui

Peshawar

ranatanveer
Subedar
Posts: 355
Joined: Sat May 07, 2005 11:54 am
Location: Lahore
Contact:

Postby ranatanveer » Sat Feb 19, 2011 12:10 am

Regards

Rana Tanveer
+923224194457


For Affordable Web Development http://www.affordableprogrammers.com
http://www.qualityprogrammers.com

asadsq
Lance Naik
Posts: 48
Joined: Fri Feb 22, 2008 3:10 pm
Location: Peshawar
Contact:

Postby asadsq » Tue Mar 01, 2011 11:40 am

Asad Zia Siddiqui

Peshawar

mudasir
Captain
Posts: 565
Joined: Tue Oct 17, 2006 5:23 am
Location: Dubai
Contact:

Postby mudasir » Wed Mar 02, 2011 5:56 pm

Kind Regards
Mudasir Mirza (RHCE)
(+971)55-1045754
http://www.crystalnetworks.org
http://www.diglinux.com

asadsq
Lance Naik
Posts: 48
Joined: Fri Feb 22, 2008 3:10 pm
Location: Peshawar
Contact:

Postby asadsq » Thu Mar 03, 2011 9:13 am

Asad Zia Siddiqui

Peshawar

mudasir
Captain
Posts: 565
Joined: Tue Oct 17, 2006 5:23 am
Location: Dubai
Contact:

Postby mudasir » Thu Mar 03, 2011 6:30 pm

Kind Regards
Mudasir Mirza (RHCE)
(+971)55-1045754
http://www.crystalnetworks.org
http://www.diglinux.com

asadsq
Lance Naik
Posts: 48
Joined: Fri Feb 22, 2008 3:10 pm
Location: Peshawar
Contact:

Postby asadsq » Sat Mar 05, 2011 9:17 am

Asad Zia Siddiqui

Peshawar

mudasir
Captain
Posts: 565
Joined: Tue Oct 17, 2006 5:23 am
Location: Dubai
Contact:

Postby mudasir » Sun Mar 06, 2011 5:29 am

Kind Regards
Mudasir Mirza (RHCE)
(+971)55-1045754
http://www.crystalnetworks.org
http://www.diglinux.com

asadsq
Lance Naik
Posts: 48
Joined: Fri Feb 22, 2008 3:10 pm
Location: Peshawar
Contact:

Postby asadsq » Mon Mar 07, 2011 9:40 am

Asad Zia Siddiqui

Peshawar

mudasir
Captain
Posts: 565
Joined: Tue Oct 17, 2006 5:23 am
Location: Dubai
Contact:

Postby mudasir » Mon Mar 07, 2011 1:17 pm

Kind Regards
Mudasir Mirza (RHCE)
(+971)55-1045754
http://www.crystalnetworks.org
http://www.diglinux.com

asadsq
Lance Naik
Posts: 48
Joined: Fri Feb 22, 2008 3:10 pm
Location: Peshawar
Contact:

Postby asadsq » Mon Mar 07, 2011 2:44 pm

Asad Zia Siddiqui

Peshawar

asadsq
Lance Naik
Posts: 48
Joined: Fri Feb 22, 2008 3:10 pm
Location: Peshawar
Contact:

Postby asadsq » Fri Mar 11, 2011 2:21 pm

I applied the following rules as per my understanding but it din't worked.
Browsing stopped.

# ARP ACLs for different groups
acl faculty_mac arp /etc/squid/mac.addresses.faculty
acl hostels_mac arp /etc/squid/mac.addresses.hostels


# DSTDOMAIN ACL for different groups
acl faculty_allow dstdomain .google.com .gmail.com .hotmail.com
acl hostels_deny audiovideo rep_mime_type ^video/x-ms-asf ^video/x-ms-sf ^audio/mpeg ^audio/x-mpeg ^audio/mp3 ^audio/x-mp3 ^audio/x-pn-realaudio ^audio/x-ms-wma ^application/x-mms framed ^application/vnd.ms.wms-hdr.asfv1 ^application/x-shockwave-flash ^application/x-mplayer2 ^application/vnd.google-earth.kmz kmz ^application/vnd.google-earth.kml+xml kml ^application/vnd.google-earth.kmz ^application/vnd.google-earth.kml



# HTTP_ACCESS rules to allow specified group ACL only to specified DSTDOMAIN
http_access allow faculty_mac faculty_allow
http_access deny hostels_mac hostels_deny
http_access deny all


Please correct me if there is any problem in sequence or any other thing
Asad Zia Siddiqui

Peshawar

asadsq
Lance Naik
Posts: 48
Joined: Fri Feb 22, 2008 3:10 pm
Location: Peshawar
Contact:

Postby asadsq » Fri Mar 11, 2011 2:29 pm

I applied the following rules as per my understanding but it din't worked.
Browsing stopped.

# ARP ACLs for different groups
acl faculty_mac arp /etc/squid/mac.addresses.faculty
acl hostels_mac arp /etc/squid/mac.addresses.hostels


# DSTDOMAIN ACL for different groups
acl faculty_allow dstdomain .google.com .gmail.com .hotmail.com
acl hostels_deny audiovideo rep_mime_type ^video/x-ms-asf ^video/x-ms-sf ^audio/mpeg ^audio/x-mpeg ^audio/mp3 ^audio/x-mp3 ^audio/x-pn-realaudio ^audio/x-ms-wma ^application/x-mms framed ^application/vnd.ms.wms-hdr.asfv1 ^application/x-shockwave-flash ^application/x-mplayer2 ^application/vnd.google-earth.kmz kmz ^application/vnd.google-earth.kml+xml kml ^application/vnd.google-earth.kmz ^application/vnd.google-earth.kml



# HTTP_ACCESS rules to allow specified group ACL only to specified DSTDOMAIN
http_access allow faculty_mac faculty_allow
http_access deny hostels_mac hostels_deny
http_access deny all


Please correct me if there is any problem in sequence or any other thing
Asad Zia Siddiqui

Peshawar

mudasir
Captain
Posts: 565
Joined: Tue Oct 17, 2006 5:23 am
Location: Dubai
Contact:

Postby mudasir » Sat Mar 12, 2011 1:53 pm

Kind Regards
Mudasir Mirza (RHCE)
(+971)55-1045754
http://www.crystalnetworks.org
http://www.diglinux.com


Return to “Administration”

Who is online

Users browsing this forum: No registered users and 0 guests