hi all,

production machines that users use ie linux/mac/pcs dont have internet access on them as they could go on a website/download a file that contains a virus/trojan and that will infect the production machine

i have thought of different ways so they can use a web browser on there production machines without having internet access

1. install a centos server, install firefox and create a soft link on each of the production machines so it opens the centos server firefox?

2. install a centos server with squid and clamav and have all the production machines use the centos server proxy?

3. install a centos server with ulteo (VDI) so users will login the VDI and open up firefox that way?

which option out of these will work?

many thanks,

rob

If you want to lose your job, any of them will work just fine. Otherwise, you need to talk to your network administrators and ask THEM how your machines can access the Internet. And even if they're OK with this, your question makes no sense at all.

You want to avoid infecting the production machine with files from the Internet....so to do that, you want to USE the production machine as your Internet gateway????

mmm, a good how to guide here -

http://squidclamav.darold.net/installv6.html

i will do it and come back to you if i get in a spot of bother

Please don't.

Again, as you were told, what you are doing **MAY GET YOU FIRED FROM YOUR JOB** do you understand that??? If you circumvent network security policies, they can toss you out. If those machines need Internet access, then you need to work WITH your network folks to get it.

Kind of many parts to this question.

One is how one can run an instance of firefox. When you run it from a server like an x window program, I'm not fully convinced that you gain any security to the local computer.

The other way would be to run an instance under a remote desktop where only the display is being sent to the clients. In reality either could present a security issue. You are connecting a trusted computer to an now untrusted computer. I'd think this remote would be safer if needed an no other choice.

I'd make a dedicated kiosk or common computer that has no access to the production systems for users to have access to.

i think many posters use terms and expressions from the professional world falsely.
maybe because that's all they know, maybe because they want to "appear larger than they are".

the "production machine" is the only hint that was given to a professional env., but maybe op just uses fancy-talk for what is a family network really?
who knows.