Steven email: sjh@svana.org
web: https://svana.org/sjh Other online diaries:
Aaron Broughton, Links:
Linux Weekly News, Canberra Weather: forecast, radar.
Categories:
|
Fri, 09 Dec 2011
Trying to be fair to students with a few doing damage. - 10:23
We could block ssh entirely to the student networks however that is not a good thing as students should be able to log on and do work from remote locations. The solution we are looking at is accounting for all student traffic on both incoming and outgoing such that ssh is blocked to all but one machine. Then on this one machine we have the netfilter patch that lets us account for traffic on the INPUT chain on a per user basis. This will mean we can set student quotas for all data, or maybe even simply subtract the ssh incoming traffic from their web quotas also. I guess students will simply have to get used to using one machine to access the rest of the student systems, should not be hard for them and will stop the people abusing the system. |