\_ I am faced with the need to filter Napster and for now a program
\_ called 'Scour' from my son's internet access. Can anyone tell me
\_ where to locate a list of ports that these programs use? I also
\_ need to start logging my son's internet use. Can you give me some
\_ pointers in enableing logging and what to expect in log output?
\_ Your help is greatly appreciated.

Try dropping all connections from said box that are *not* to port 80,
port 443 (https), or your provider's pop account [depending].  Turn on
logging for all web syn packets.  You'll have to decode ip->name, but
that's easy enough.

You won't prevent his to www.evilempire.com initially, but you'll have
a log that says he went there.  

The biggest problem is that if he's at all web savvy, you'll have this
breached immediately through a simple redirection through
akamai...unless you ban them entirely, which will probably cripple
other important stuff.

You could slap a web proxy up...that'd probably give you more control
over content (ad banners, text from picture sites, etc).

Try wiring up a set of household speakers to the computer and whenever
you get a banned IP or an akamai hit (never can be too sure), play a
big siren sound on the speakers.

Although, if I were a kid with that, I'd test it just to cry wolf
until it was turned off.  Although the look on the face should be
classic the first time.

Try ipchains-howto; it's helpful.

David