The getbusi system sits on the local network. It does not act as a gateway but as a proxy cache. Client machines access getbusi by pointing their web browsers proxy settings to the getbusi system.

Firewall setup

To prevent users bypassing the getbusi system and gaining direct access to the Internet, you should set your firewall up to block all outgoing traffic on the following ports:

• Port 80 - HTTP
• Port 443 - HTTPS
• Port 21 - FTP
• And other ports you wish users to utilise via the getbusi system

You should then allow the getbusi system out through your firewall on these ports.

The getbusi system requires access to the following ports on the Internet:

• Port 80 - HTTP
• Port 443 - HTTPS
• Port 21 - FTP
• Port 22 - SSH
• Port 25 - SMTP
• Port 53 - DNS
• Port 873 - RSYNC (Web filtering updates)
• Port 123 - NTP (Time)

Network Diagram

top