[K12OSN] SquidGuard and Proxy Questions

Petre Scheie petre at maltzen.net
Tue Jan 4 14:40:58 UTC 2005

You may also be able to configure your router/firewall to only accept inside 
connections coming from the  squidguard box.  It's simple, easy to test, but it 
doesn't address your google problem.


Mike Rambo wrote:
> On Tue, 2005-01-04 at 08:40, Timothy Legge wrote:
>>Yes, that was one of the options but I will probably
>>just use an IPCOP/SquidGuard combination if I can work
>>out how to block google's safe search off option.
> Use squidGuard url rewriting for this. Eric modified SG to do this seems
> like back around the 3.1.x days (you can also rewrite urls for other
> search engines to force them to use google and thereby safesearch). Last
> I looked there were examples in the k12ltsp SG config file. There is
> also support in SG to block users from accessing sites directly by ip
> instead of name (ie. do an nslookup of badporn.com and access by ip
> instead of typing badporn.com as the url) but it isn't enabled by
> default in the k12ltsp squidGuard releases (not a big deal as all it
> takes is !in-addr in the acl's). This is important because squidGuard
> doesn't do a reverse lookup to check for blocked sites when the user
> directly types an ip address instead of a url in a browser. squidGuard
> was designed to be very lightweight and fast - reverse lookups would
> slow SG down significantly.

More information about the K12OSN mailing list