linux poison RSS
linux poison Email

Web content filtering with DansGuardian

DansGuardian provides web filtering capability, similar to NetNanny. It is useful for limitng objectionable content in publicly accessible workstations, or for filtering objectionable content for younger users. It integrates with ClamAV, and uses several criteria for filtering websites. It can be used with Tinyproxy (best for individual users) or the Squid proxy (best for a network server).

DansGuardian features:
    * Built-in content scanner plugin system which includes AV scanning.
    * NTLM and persistent connection support.
    * Header analysis and manipulation so you can manipulate cookies
    * Large file (2GB+) download & scanning support
    * Autotools build system
    * URL regular expression replacement so you can force safe search in Google
    * Deep URL scanning to spot URLs in URLs to for example block images in Google images
    * Advanced advert blocking
    * Many performance improvements
    * Updates to handle all current web technology trends
    * Blanket SSL blocking so you can block SSL anonymous proxies and allow access to legitimate SSL sites such as banking by whitelisting

Installation on Ubuntu Interpid:
sudo apt-get install dansguardian tinyproxy
sudo apt-get install dansguardian squid

See these installation instructions for setup details. In brief,

Edit the dansguardian configuration file:sudo vi /etc/dansguardian/dansguardian.conf
comment out the UNCONFIGURED line:

If using tinyproxy instead of Squid, change the proxyport to 8888:
proxyport 8888

Set your browser to use the localhost:8080 proxy. For example, in Firefox:
Firefox -> Edit -> Preferences -> Advanced -> Network -> Settings
Manual proxy configuration -> HTTP proxy: localhost -> Port: 8080


tonytamaulipas said...

I installed dansguardian with tinyproxy in a computer lab in a school, and they run perfect. The problem started after the network administrator installed a squid proxy applied to the entire school network. Squid was only installed but not configured to block anything, this suppose a problem to me because students can access everything. Well, here the real problem, the computer where I installed dansguardian can't connect to internet directly but only if it is configured to use the squid proxy. I configured it and the computer can surf normally, but the others machines can't reach any webpage. What can I do?

DevOps said...

First make sure that other computer is configured with proper proxy setting and pointing to the dansguardian and not to the squid.

Post a Comment

Related Posts with Thumbnails