[K12OSN] website blocking

[Casey Woods]

I built a Squid / Dansguardian content filter in about 10 minutes using 
Ubuntu 5.10.  Apt-get is a wonderful thing.

Config files were very straightforward and the documentation is pretty good.

I'm running it on any ancient P2 with 128 MB of ram and it runs fine.

I just created a rule on the firewall which prohibits outbound traffic 
on port 80 and 443 from the terminal server to the internet.  But, there 
is also a rule which allows those ports from the squid/dansguardian box.

That way, students HAVE to use the proxy.  They can't mess around or 
else they can't access the internet at all.


Petre Scheie wrote:

>
>
> Joseph Bishay wrote:
>
>> Hello,
>>
>> On 11/9/05, Petre Scheie <petre at maltzen.net> wrote:
>>
>>> That's come up before: For DansGuardian or SquidGuard to work, they 
>>> must be installed on
>>> a machine separate from the terminal server; it won't work if you 
>>> install it on the
>>> terminal server.
>>
>>
>>
>> Is that for sure? On the previous version of ltsp (the one released
>> last year) I had it running on the terminal server no problem. You
>> just have to make sure that each account's proxy is set to the correct
>> port.
>>
>> Joseph
>
>
> I think that was the issue: people wanted to be able to prevent 
> students from bypassing the filtered proxy.  If it's set in each 
> user's account, the user could just go in and turn off the proxy 
> setting and hit any site.  Using a separate box as the gateway & proxy 
> made it impossible to sneak around the filter (and eliminated the need 
> to configure every user's setup).
>
> _______________________________________________
> K12OSN mailing list
> K12OSN at redhat.com
> https://www.redhat.com/mailman/listinfo/k12osn
> For more info see <http://www.k12os.org>
>