The SmoothRule module allows an organisation to control what Internet services it\'s users can access. By default SmoothWall allows users unrestricted Internet access but blocks all incoming traffic that does not result from a request from the local (protected) network.
There is a growing realisation that a lot of time spent by employees on the Internet is not productive. Research from organisations like IDC reveals that as much as 40% of Internet usage by employees isn\'t work related. This is not only an issue of wasted time but downloading large music files, listening to radio stations via the Internet etc. will waste a considerable amount of bandwidth and slow down other users. Indeed just two or three users listening to the radio could virtually bring a half megabyte Internet connection to a halt. Furthermore the copyright on virtually all downloaded music is probably being infringed, for which the organisation would be liable. Perhaps even more damaging is the fact that most music download systems install peer to peer networking software on the user PC, so allowing others to share the music. However many of these music sharing systems are reputed to be open to various exploits - so the user may be inadvertently sharing the organisation\'s confidential data on both their PC and any servers to which they have access? Frightening! Who knows, for without SmoothRule nobody is in control!
SmoothRule allows the system administrator to create rule sets, effectively lists of Internet Protocol (IP) Ports, such as email, web browsing, file transfer etc. A list can be set to operate in either restrictive or permissive mode. In Restrictive mode only those services listed in the rule set can be used, all other services will be blocked. This allows users to be restricted to a narrow list of Internet activities, such as only being allowed to browse the web and send/receive email. Conversely in Permissive mode, only those services listed in the rule set will be blocked, all other services will be useable. This mode would typically be used to stop particular Internet services such as chat, music downloads and peer to peer networking.
Rule sets can be applied to whole subnets, to particular groups of user PCs using network addresses, or to individual user IP addresses. The De-Militarized Zone (DMZ) is also subject to the control of SmoothRule, allowing the Internet services run on a DMZ server to be managed.
When one realises just how much time can and typically is being wasted on Internet usage and what potential trouble an organisation could get into (accessing pornography, copyrighted music, peer to peer networks) - then putting in controls to stop abuse makes very good business sense.
SmoothRule is built in to Advanced firewall and Schoolguardian, and is available as a module for Corporate Firewall.
');