[ubuntu-za] Home network implementations (Phase 1)

[Lee Sharp]

Wikus Cornelius wrote:
> Greetings,
> 
> I have started with a new Ubuntu mission and I need some help
> 
> Background: I live with 3 other people sharing the same ADSL connection. 
> I pay for the majority of the bandwidth because I use the most 
> (bandwidth is not monitored). The other 3 people use Windows and lately 
> their usage have increased dramatically due to automatic updates started 
> by installed applications on their PCs and processes uploading huge 
> amounts of data (spy ware or whatever). They are not capable of managing 
> these things and I have volunteered to install Ubuntu for them alongside 
> their Windows installation. The idea is that they use Windows for gaming 
> and Ubuntu for almost everything else. My Linux skills are limited, but 
> this will give me an opportunity to learn.

Keep in mind that I am a big linux fan, and try to use it whenever and 
where ever I can.  But in this case I do not think you are solving your 
problem.  You could actually be making it worse.  Let me start by 
defining what I think you problem is, and please correct me if I am wrong.

1) Bandwidth is unevenly shared, and payed for, with no accounting.
2) Bandwidth has gone up due to massive MS updates.

By adding another OS to the mix, you will not remove the update 
requirements of Windows, and will add the updates of Ubuntu.  You also 
still have no accounting.

> What we have at the moment:
> ADLS router and everyone is directly connected to the router.
> 
> I am planning to implement the improvements in phases and I will post my 
> questions accordingly. I can only work on this over weekends.
> 
> Questions for the first phase:
> 1. For a start I want to use the server only for routing with no 
> control. I have an idea how to do the routing (previous question on 
> Ubuntu-za), but it seems to be gone after a reboot. Which file do I have 
> to edit to add the routing configuration automatically when the server boot?

Do not roll your own.  It is very complex, and you will have a poor 
solution.  Instead, consider m0n0wall, pfsense, or Untangle.  These are 
fully built, mature, and tested firewalls+ that are all open source. 
(Untangle is open source with some closed source options)  If you use 
m0n0wall, you can use the captive portal to track bandwidth among each 
other.  It will keep hard feelings down.  If you use pfsense, you can 
include a proxy to reduce bandwidth directly.  If you use Untangle, the 
spam and web filters can drop bandwidth as well.  (Note that I am a dev 
on m0n0wall and Untangle, and pfsense is a fork of m0n0wall)

> 2. Is there a tool that I can use to change the size of the partitions 
> on the PCs (before installation) to create space for the Ubuntu 
> installations? I know about Partition Magic, but it is not free.

It is on the CD.  But gparted also has a boot CD that is very handy.

> 3. I am going to install the same applications and updates on all the 
> machines, but I want to download it only once. How do I do that?

As stated, or you can pull the files manually from 
/var/cache/apt/archives on a fully patched system.  Also, several people 
maintain local repos, and a CD of updates saves even more bandwidth.

> 4. I want to block the Windows installations from accessing the internet 
> (probably in later phase, but please share your ideas on this)

A captive portal with login is the only transparent way.  And you can 
log in when you need access.  Or, you can give them static IPs, and a 
bad default gateway.  A firewall has no way of knowing what OS a 
computer is running.  (Not entirely true, but it is in this case)

> 5. One of the guys on the network is interested in home video editing. 
> Is there an editing system for Ubuntu that you can suggest?

Look at Ubuntu Studio.  It is a variant of Ubuntu with A/V editing in mind.

> I do not expect explanations, just pointers. Any ideas, suggestions or 
> advice are welcome. The above will keep me busy for this weekend 
> (configure and install 3 Ubuntu PCs and 1 server/router + required 
> research).

I would say more time on the research... :)

			Lee