This is a discussion on how to restrict amount of data sent to internet within the Linux Security forums, part of the System Security and Security Related category; Hi, I am administrator. We've all linux boxes. We wish to restrict users from sending any data more than ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Hi Davide,
For that matter, any data sent out of our network. We're trying to make sure that they don't send any company's confidential info out of our network. If we find 1 kb is very small, then we could have it as 4 kb. But the idea is to restrict the user to send only a limited stream of packets out at a time to preserve our confidential data. Hope it explains... Rgds, Naren. |
|
|||
|
narenkumaraguru@yahoo.co.uk wrote:
> For that matter, any data sent out of our network. We're trying to > make sure that they don't send any company's confidential info out of > our network. If we find 1 kb is very small, then we could have it as 4 > kb. But the idea is to restrict the user to send only a limited stream > of packets out at a time to preserve our confidential data. > Hope it explains... And what prevents me from splitting your confidential data into chunks of 1 kb, and sending those out ? You can't prevent users stealing data his way. Start with auditing, and a proxy that maps connections to users. Igmar |
|
|||
|
narenkumaraguru@yahoo.co.uk wrote:
> Could you elaborate on this more?? Could you also give me more pointers > ?? > Are you talking about sending out 1 or 4kB attachments in emails or just general traffic? If you want to do this you will also need to specify a time interval as the kB's through the router really mount up quickly just doing not much. Also check your inbox. Even text emails are 1 or 2 kB. Further, if you're going to restrict internet bandwidth, there's nothing to stop users loading stuff onto a USB key/HDD and taking that off site - certainly not in Windows anyway. Linux, you can prevent a mount operation. Failing that, what's to prevent your untrustworthy users from just printing stuff out and taking hard copies? A lock only keeps the honest people out... |