Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have a server and I want to offer a tunnel through this server to some of my friends. But I want to limit the sites they can access using this tunnel.

My plan was to create a user account without shell access, so that they can connect using ssh to have a tunneling socks proxy.

Is there a way to limit the sites a linux user can access?

It would be nice, if a URL based white-listing is possible, but IP based white-listing would also be okay. Are there any other secure(!) software solutions to solve this?

Thanks in advance

share|improve this question
1  
Is there any reason not to use Squid instead of SSH Tunnel? –  Karlson Dec 29 '11 at 13:57
add comment

1 Answer

up vote 1 down vote accepted

2 options:

  • using IPTables, only allow access to the IP address you want the user visit.
  • give them a SQUID server they can use.

The SQUID server is probably the easiest option, given they will need an endpoint to connect to anyway. Using SQUID will give you the ability to block access to some sites, give access to others, and depending on how its setup, give you the ability to cache files also...

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.