dansguardian (was: Re: Sonicwall)

["shrek-m () gmx de" <shrek-m () gmx de>]

On 07.02.2006 22:40, Dennis Rogers wrote:

> bhartiap () gmail com wrote:
>
> >  content filtering services.
>
> The best solution we found was Dan's Guardian.  While it takes more 
> manpower to setup and slightly more to maintain, the cost savings were 
> WELL worth it.


dansguardian is easy to setup and maintain.
http://dansguardian.org/


here  (50 pupils, 400 mhz, 128 mb ram)  we have since a long time  
redhat_linux/fedora_core and squid
since a few month  dg  without problems.

download and install dansguardian as rpm or compile it
take a look at eg. /etc/dansguardian/dansguardianf1.conf : 
naughtynesslimit = 100

# ls /etc/dansguardian/
bannedextensionlist  banneduserlist       exceptionurllist   phraselists
bannediplist         contentregexplist    exceptionuserlist  pics
bannedmimetypelist   dansguardian.conf    filtergroupslist   
transparent1x1.gif
bannedphraselist     dansguardianf1.conf  greysitelist       
weightedphraselist
bannedregexpurllist  exceptioniplist      greyurllist
bannedsitelist       exceptionphraselist  languages
bannedurllist        exceptionsitelist    logrotation


i prefer to switch the ports between squid->8080 and dg->3128  
(dansguardian.conf:filterport)  so i have nothing to change on the 
client side.

restart dansguardian and squid and check the logs, eg.
# tail -f /var/log/dansguardian/access.log
2006.2.8 23:31:35 user18 192.168.0.18 http://www.rotten.de *DENIED* 
Gewichtete Ausdrucksbeschr\uffffnkung von 100 : 253 (strange 
sex+porno+muschi+sexcam+ sex +sex cam+foto+liveshow+naughty) GET 8996



done

--
shrek-m

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------