LinuxMCE - User contributions [en]

Installing Dansguardian on LinuxMCE

2009-10-30T14:22:06Z

Anupindi007: /* DHCP Server */

[[Category: Tutorials]]
{| align="right"
| __TOC__
|}

==Basics==
DansGuardian is an award winning Open Source web content filter which currently runs on Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris. It filters the actual content of pages based on many methods including phrase matching, PICS filtering and URL filtering. It does not purely filter based on a banned list of sites like lesser totally commercial filters.

DansGuardian is designed to be completely flexible and allows you to tailor the filtering to your exact needs. It can be as draconian or as unobstructive as you want. The default settings are geared towards what a primary school might want but DansGuardian puts you in control of what you want to block.

DansGuardian is a true web content filter. We will see how to configure DansGuardian on Ubuntu Linux along with LinuxMCE.

==Installing packages==
===tinyproxy===
apt-get install tinyproxy

===shorewall===
apt-get install shorewall

===dansguardian===
apt-get install dansguardian

===dhcp===
apt-get install dhcp3-server

===dns server===
apt-get install dnsmasq

Optional:

==Dansguardian Web Log Viewer==
apt-get install dglog

==Installing webmin and dansguardian webmin module==
First you need to install the additional packages:
sudo aptitude install perl libnet-ssleay-perl openssl libauthen-pam-perl libpam-runtime libio-pty-perl libmd5-perl

Download and install webmin package:
wget http://prdownloads.sourceforge.net/webadmin/webmin_1.480_all.deb

sudo dpkg -i webmin_1.480_all.deb

==Configure Packages==
===Tinyproxy===
vi /etc/tinyproxy/tinyproxy.conf
Make the following changes
# User root
# Group root
# Allow 192.168.80.0/25

===Dansguardian===
vi /etc/dansguardian/dansguardian.conf
Make the following changes:
# Delete UNCONFIGURED line
# filterport = 8081
# proxyip = 192.168.80.1
# proxyport = 8888
# usernameidmethodproxyauth = off

===Shorewall===
Make the following changes:

'''copy configuration files (take backup of existing files):'''
cp /usr/share/doc/shorewall-common/default-config/* /etc/shorewall/

'''set "shorewall" auto start at boot time:'''
vi /etc/default/shorewall
# startup = 1

'''"zones" tells the firewall to zone each name for the rest configuration file e.g. loc, net:'''
vi /etc/shorewall/zones
# #ZONES TYPE OPTION IN OUT
# #OPTIONS OPTIONS
# fw firewall
# net ipv4
# loc ipv4
# #Last Line - ADD ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"interfaces" tells the firewall which is internal and external interfaces:'''
vi /etc/shorewall/interfaces
# #ZONE INTERFACE BROADCAST OPTIONS
# #Note assuming "eth1"- is internal ip & "eth0"- is external ip
# net eth0 detect dhcp,tcpflags
# loc eth1 detect dhcp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"masq" tells the firewall that internal network(eth1)is connected through external network(eth0):'''
vi /etc/shorewall/masq
# #INTERFACE SUBNET ADDRESS PROTO PORT(S) IPSEC
# eth0 eth1
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"policy" tells the firewall that how should handle the requests:'''
vi /etc/shorewall/policy
# loc all ACCEPT
# net all DROP
# fw all ACCEPT
# all all REJECT

'''"shorewall.conf" we will configure ip_forwarding:'''
vi /etc/shorewall/shorewall.conf
# IP_FORWARDING=On

'''"rules" allows to set firewall rules:'''
vi /etc/shorewall/rules
# SECTION NEW
# ACCEPT net fw tcp 80
# REDIRECT loc 8081 tcp www
# ACCEPT loc fw tcp 22
# ACCEPT net fw icmp
# ACCEPT loc loc icmp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

''' # check shorewall working or not properly:'''
shorewall check

==Restart Applications==
/etc/init.d/dnsmasq restart
/etc/init.d/tinyproxy restart
/etc/init.d/shorewall restart
/etc/init.d/dansguardian restart

Troubleshooting:
1. Still not working restart the system once
2. Check all service started are not "ps -ef | grep <service>" service - apache2, dnsmasq, tinyproxy, shorewall, dansguardian,
and dhcpd. If any of the service is not starting, start the service sh /etc/init.d.<service> start. Check especially dnsmasq
and shorewall services.

==DHCP Server==
Note: you need not to make any changes if you are working on single system or dhcp is already running on your local network interface(any changes dhcpd.conf or interfaces respective files)

vi /etc/default/dhcp3-server

# INTERFACE="eth1"

vi /etc/dhcp3/dhcpd.conf
# #change the subnet, netmask, range, dns, router as per your settings
# default-leasetime=86400
# max-leasetime=60480
# subnet 192.168.0.0 netmask 255.255.255.0{
# range 192.168.0.2 192.168.1.99;
# option domain-name-server 192.168.80.1;
# option routers 192.168.80.2;
#}

set static ip address:
vi /etc/network/interfaces
# auto lo
# iface lo inet loopback
# auto eth0
# iface eth0 inet dhcp
# auto eth1
# iface eth1 inet static
# address 192.168.80.1
# netmask 255.255.255.0

#restart dhcp
# /etc/init.d/dhcpd restart

==Adding BlackList==

A BlackList is a precompiled list of sites that are deemed potentially worrisome.
cd /etc/dansguardian
wget http://urlblacklist.com/downloads/OriginalUpdateBL
vi OriginalUpdateBL
#modify line 68 by switching the listed URL with the following:
#http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist

chmod 777 /etc/dansguardian/OriginalUpdateBL
/etc/dansguardian/OriginalUpdateBL

when script is finished if you see any errors.
/etc/init.d/dansguardian restart

if the above script is not creating blacklists directory and creating blacklists file then follow the following:
cd /etc/dansguardian
wget http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist
tar -xvf bigblacklist.tar.gz
chown -R root:root blacklists
chmod -R 755 blacklists

==Webmin and Dansguardian webmin configuration==
Login into Webmin(open your web browser and enter the following):
https://192.168.80.1:10000/

Install and configure the Dansguardian Webmin module:
1.Open browser & login as madmin(sudo user) https://192.168.80.1:10000

2.Go to Webmin > Webmin Configuration > Webmin Modules
Select "From ftp or http URL" and paste the link below into the dialog box and click Install Module.
(http://downloads.sourceforge.net/project/dgwebminmodule/dgwebmin-devel/0.7.0beta1b/dgwebmin-0.7.0beta1b.wbm?use_mirror=voxel)

Observe: The following modules have been successfully installed and added to your access control list :
DansGuardian Web Content Filter in /usr/share/webmin/dansguardian (4612 kB) under category Servers

'''Trouble shooting:'''

The first time you try to run the dg module, you'll get errors such as:
Warning - DansGuardian binary file not found, maybe you need to update your module config (especially the directory paths).
(Expected location: /sbin/dansguardian)

'''Solution:'''

The problem is that the we are using different directory locations for many of the files.
So, look at the Configurable options for DansGuardian Web Content Filter (in the upper left corner of the dg page) - and nearly every path needs to be changed.

For instance, our binary is in '''/usr/sbin/dansguardian''' instead of '''/sbin/dansguardian''', so change that.

Confirm the locations for the rest of the files by running

find / -name dansguardian
results may show:
/usr/share/webmin/dansguardian
/usr/share/lintian/overrides/dansguardian
/usr/share/doc/dansguardian
/usr/share/dansguardian
/usr/sbin/dansguardian
/var/log/dansguardian
/etc/webmin/dansguardian
/etc/init.d/dansguardian
/etc/logrotate.d/dansguardian
/etc/dansguardian

When you've finished replacing all of the locations, hit save on the config page and then "stop & restart DG" on the top right of the main DG page.

Then it should work! If not, check your syslog for errors.
You should be able to check the status of DG, review logs with a good viewer, and view and edit many of the detailed configurations.

Installing Dansguardian on LinuxMCE

2009-10-05T16:16:53Z

Anupindi007: /* Draft page */

[[Category: Tutorials]]
{| align="right"
| __TOC__
|}

==Basics==
DansGuardian is an award winning Open Source web content filter which currently runs on Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris. It filters the actual content of pages based on many methods including phrase matching, PICS filtering and URL filtering. It does not purely filter based on a banned list of sites like lesser totally commercial filters.

DansGuardian is designed to be completely flexible and allows you to tailor the filtering to your exact needs. It can be as draconian or as unobstructive as you want. The default settings are geared towards what a primary school might want but DansGuardian puts you in control of what you want to block.

DansGuardian is a true web content filter. We will see how to configure DansGuardian on Ubuntu Linux along with LinuxMCE.

==Installing packages==
===tinyproxy===
apt-get install tinyproxy

===shorewall===
apt-get install shorewall

===dansguardian===
apt-get install dansguardian

===dhcp===
apt-get install dhcp3-server

===dns server===
apt-get install dnsmasq

Optional:

==Dansguardian Web Log Viewer==
apt-get install dglog

==Installing webmin and dansguardian webmin module==
First you need to install the additional packages:
sudo aptitude install perl libnet-ssleay-perl openssl libauthen-pam-perl libpam-runtime libio-pty-perl libmd5-perl

Download and install webmin package:
wget http://prdownloads.sourceforge.net/webadmin/webmin_1.480_all.deb

sudo dpkg -i webmin_1.480_all.deb

==Configure Packages==
===Tinyproxy===
vi /etc/tinyproxy/tinyproxy.conf
Make the following changes
# User root
# Group root
# Allow 192.168.80.0/25

===Dansguardian===
vi /etc/dansguardian/dansguardian.conf
Make the following changes:
# Delete UNCONFIGURED line
# filterport = 8081
# proxyip = 192.168.80.1
# proxyport = 8888
# usernameidmethodproxyauth = off

===Shorewall===
Make the following changes:

'''copy configuration files (take backup of existing files):'''
cp /usr/share/doc/shorewall-common/default-config/* /etc/shorewall/

'''set "shorewall" auto start at boot time:'''
vi /etc/default/shorewall
# startup = 1

'''"zones" tells the firewall to zone each name for the rest configuration file e.g. loc, net:'''
vi /etc/shorewall/zones
# #ZONES TYPE OPTION IN OUT
# #OPTIONS OPTIONS
# fw firewall
# net ipv4
# loc ipv4
# #Last Line - ADD ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"interfaces" tells the firewall which is internal and external interfaces:'''
vi /etc/shorewall/interfaces
# #ZONE INTERFACE BROADCAST OPTIONS
# #Note assuming "eth1"- is internal ip & "eth0"- is external ip
# net eth0 detect dhcp,tcpflags
# loc eth1 detect dhcp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"masq" tells the firewall that internal network(eth1)is connected through external network(eth0):'''
vi /etc/shorewall/masq
# #INTERFACE SUBNET ADDRESS PROTO PORT(S) IPSEC
# eth0 eth1
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"policy" tells the firewall that how should handle the requests:'''
vi /etc/shorewall/policy
# loc all ACCEPT
# net all DROP
# fw all ACCEPT
# all all REJECT

'''"shorewall.conf" we will configure ip_forwarding:'''
vi /etc/shorewall/shorewall.conf
# IP_FORWARDING=On

'''"rules" allows to set firewall rules:'''
vi /etc/shorewall/rules
# SECTION NEW
# ACCEPT net fw tcp 80
# REDIRECT loc 8081 tcp www
# ACCEPT loc fw tcp 22
# ACCEPT net fw icmp
# ACCEPT loc loc icmp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

''' # check shorewall working or not properly:'''
shorewall check

==Restart Applications==
/etc/init.d/dnsmasq restart
/etc/init.d/tinyproxy restart
/etc/init.d/shorewall restart
/etc/init.d/dansguardian restart

Troubleshooting:
1. Still not working restart the system once
2. Check all service started are not "ps -ef | grep <service>" service - apache2, dnsmasq, tinyproxy, shorewall, dansguardian,
and dhcpd. If any of the service is not starting, start the service sh /etc/init.d.<service> start. Check especially dnsmasq
and shorewall services.

==DHCP Server==
Note: you need not to make any changes if you are working on single system or dhcp is already running on your local network interface(any changes dhcpd.conf or interfaces respective files)

vi /etc/default/dhcp3-server

# INTERFACE="eth1"

vi /etc/dhcp3/dhcpd.conf
# #change the subnet, netmask, range, dns, router as per your settings
# default-leasetime=86400
# max-leasetime=60480
# subnet 192.168.0.0 netmask 255.255.255.0{
# range 192.168.0.2 192.168.1.99;
# option domain-name-server 192.168.80.1;
# option routers 192.168.80.2;
#}

set static ip address:
vi /etc/network/interfaces
# auto lo
# iface lo inet loopback
# auto eth1
# iface eth0 inet static
# address 192.168.80.1
# netmask 255.255.255.0

#restart dhcp
# /etc/init.d/dhcpd restart

==Adding BlackList==

A BlackList is a precompiled list of sites that are deemed potentially worrisome.
cd /etc/dansguardian
wget http://urlblacklist.com/downloads/OriginalUpdateBL
vi OriginalUpdateBL
#modify line 68 by switching the listed URL with the following:
#http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist

chmod 777 /etc/dansguardian/OriginalUpdateBL
/etc/dansguardian/OriginalUpdateBL

when script is finished if you see any errors.
/etc/init.d/dansguardian restart

if the above script is not creating blacklists directory and creating blacklists file then follow the following:
cd /etc/dansguardian
wget http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist
tar -xvf bigblacklist.tar.gz
chown -R root:root blacklists
chmod -R 755 blacklists

==Webmin and Dansguardian webmin configuration==
Login into Webmin(open your web browser and enter the following):
https://192.168.80.1:10000/

Install and configure the Dansguardian Webmin module:
1.Open browser & login as madmin(sudo user) https://192.168.80.1:10000

2.Go to Webmin > Webmin Configuration > Webmin Modules
Select "From ftp or http URL" and paste the link below into the dialog box and click Install Module.
(http://downloads.sourceforge.net/project/dgwebminmodule/dgwebmin-devel/0.7.0beta1b/dgwebmin-0.7.0beta1b.wbm?use_mirror=voxel)

Observe: The following modules have been successfully installed and added to your access control list :
DansGuardian Web Content Filter in /usr/share/webmin/dansguardian (4612 kB) under category Servers

'''Trouble shooting:'''

The first time you try to run the dg module, you'll get errors such as:
Warning - DansGuardian binary file not found, maybe you need to update your module config (especially the directory paths).
(Expected location: /sbin/dansguardian)

'''Solution:'''

The problem is that the we are using different directory locations for many of the files.
So, look at the Configurable options for DansGuardian Web Content Filter (in the upper left corner of the dg page) - and nearly every path needs to be changed.

For instance, our binary is in '''/usr/sbin/dansguardian''' instead of '''/sbin/dansguardian''', so change that.

Confirm the locations for the rest of the files by running

find / -name dansguardian
results may show:
/usr/share/webmin/dansguardian
/usr/share/lintian/overrides/dansguardian
/usr/share/doc/dansguardian
/usr/share/dansguardian
/usr/sbin/dansguardian
/var/log/dansguardian
/etc/webmin/dansguardian
/etc/init.d/dansguardian
/etc/logrotate.d/dansguardian
/etc/dansguardian

When you've finished replacing all of the locations, hit save on the config page and then "stop & restart DG" on the top right of the main DG page.

Then it should work! If not, check your syslog for errors.
You should be able to check the status of DG, review logs with a good viewer, and view and edit many of the detailed configurations.

Installing Dansguardian on LinuxMCE

2009-09-13T18:55:40Z

Anupindi007:

[[Category: Tutorials]]
{| align="right"
| __TOC__
|}
===Draft page===
Still under draft and yet to finalize...
Thanks

==Basics==
DansGuardian is an award winning Open Source web content filter which currently runs on Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris. It filters the actual content of pages based on many methods including phrase matching, PICS filtering and URL filtering. It does not purely filter based on a banned list of sites like lesser totally commercial filters.

DansGuardian is designed to be completely flexible and allows you to tailor the filtering to your exact needs. It can be as draconian or as unobstructive as you want. The default settings are geared towards what a primary school might want but DansGuardian puts you in control of what you want to block.

DansGuardian is a true web content filter. We will see how to configure DansGuardian on Ubuntu Linux along with LinuxMCE.

==Installing packages==
===tinyproxy===
apt-get install tinyproxy

===shorewall===
apt-get install shorewall

===dansguardian===
apt-get install dansguardian

===dhcp===
apt-get install dhcp3-server

===dns server===
apt-get install dnsmasq

Optional:

==Dansguardian Web Log Viewer==
apt-get install dglog

==Installing webmin and dansguardian webmin module==
First you need to install the additional packages:
sudo aptitude install perl libnet-ssleay-perl openssl libauthen-pam-perl libpam-runtime libio-pty-perl libmd5-perl

Download and install webmin package:
wget http://prdownloads.sourceforge.net/webadmin/webmin_1.480_all.deb

sudo dpkg -i webmin_1.480_all.deb

==Configure Packages==
===Tinyproxy===
vi /etc/tinyproxy/tinyproxy.conf
Make the following changes
# User root
# Group root
# Allow 192.168.80.0/25

===Dansguardian===
vi /etc/dansguardian/dansguardian.conf
Make the following changes:
# Delete UNCONFIGURED line
# filterport = 8081
# proxyip = 192.168.80.1
# proxyport = 8888
# usernameidmethodproxyauth = off

===Shorewall===
Make the following changes:

'''copy configuration files (take backup of existing files):'''
cp /usr/share/doc/shorewall-common/default-config/* /etc/shorewall/

'''set "shorewall" auto start at boot time:'''
vi /etc/default/shorewall
# startup = 1

'''"zones" tells the firewall to zone each name for the rest configuration file e.g. loc, net:'''
vi /etc/shorewall/zones
# #ZONES TYPE OPTION IN OUT
# #OPTIONS OPTIONS
# fw firewall
# net ipv4
# loc ipv4
# #Last Line - ADD ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"interfaces" tells the firewall which is internal and external interfaces:'''
vi /etc/shorewall/interfaces
# #ZONE INTERFACE BROADCAST OPTIONS
# #Note assuming "eth1"- is internal ip & "eth0"- is external ip
# net eth0 detect dhcp,tcpflags
# loc eth1 detect dhcp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"masq" tells the firewall that internal network(eth1)is connected through external network(eth0):'''
vi /etc/shorewall/masq
# #INTERFACE SUBNET ADDRESS PROTO PORT(S) IPSEC
# eth0 eth1
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"policy" tells the firewall that how should handle the requests:'''
vi /etc/shorewall/policy
# loc all ACCEPT
# net all DROP
# fw all ACCEPT
# all all REJECT

'''"shorewall.conf" we will configure ip_forwarding:'''
vi /etc/shorewall/shorewall.conf
# IP_FORWARDING=On

'''"rules" allows to set firewall rules:'''
vi /etc/shorewall/rules
# SECTION NEW
# ACCEPT net fw tcp 80
# REDIRECT loc 8081 tcp www
# ACCEPT loc fw tcp 22
# ACCEPT net fw icmp
# ACCEPT loc loc icmp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

''' # check shorewall working or not properly:'''
shorewall check

==Restart Applications==
/etc/init.d/dnsmasq restart
/etc/init.d/tinyproxy restart
/etc/init.d/shorewall restart
/etc/init.d/dansguardian restart

Troubleshooting:
1. Still not working restart the system once
2. Check all service started are not "ps -ef | grep <service>" service - apache2, dnsmasq, tinyproxy, shorewall, dansguardian,
and dhcpd. If any of the service is not starting, start the service sh /etc/init.d.<service> start. Check especially dnsmasq
and shorewall services.

==DHCP Server==
Note: you need not to make any changes if you are working on single system or dhcp is already running on your local network interface(any changes dhcpd.conf or interfaces respective files)

vi /etc/default/dhcp3-server

# INTERFACE="eth1"

vi /etc/dhcp3/dhcpd.conf
# #change the subnet, netmask, range, dns, router as per your settings
# default-leasetime=86400
# max-leasetime=60480
# subnet 192.168.0.0 netmask 255.255.255.0{
# range 192.168.0.2 192.168.1.99;
# option domain-name-server 192.168.80.1;
# option routers 192.168.80.2;
#}

set static ip address:
vi /etc/network/interfaces
# auto lo
# iface lo inet loopback
# auto eth1
# iface eth0 inet static
# address 192.168.80.1
# netmask 255.255.255.0

#restart dhcp
# /etc/init.d/dhcpd restart

==Adding BlackList==

A BlackList is a precompiled list of sites that are deemed potentially worrisome.
cd /etc/dansguardian
wget http://urlblacklist.com/downloads/OriginalUpdateBL
vi OriginalUpdateBL
#modify line 68 by switching the listed URL with the following:
#http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist

chmod 777 /etc/dansguardian/OriginalUpdateBL
/etc/dansguardian/OriginalUpdateBL

when script is finished if you see any errors.
/etc/init.d/dansguardian restart

if the above script is not creating blacklists directory and creating blacklists file then follow the following:
cd /etc/dansguardian
wget http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist
tar -xvf bigblacklist.tar.gz
chown -R root:root blacklists
chmod -R 755 blacklists

==Webmin and Dansguardian webmin configuration==
Login into Webmin(open your web browser and enter the following):
https://192.168.80.1:10000/

Install and configure the Dansguardian Webmin module:
1.Open browser & login as madmin(sudo user) https://192.168.80.1:10000

2.Go to Webmin > Webmin Configuration > Webmin Modules
Select "From ftp or http URL" and paste the link below into the dialog box and click Install Module.
(http://downloads.sourceforge.net/project/dgwebminmodule/dgwebmin-devel/0.7.0beta1b/dgwebmin-0.7.0beta1b.wbm?use_mirror=voxel)

Observe: The following modules have been successfully installed and added to your access control list :
DansGuardian Web Content Filter in /usr/share/webmin/dansguardian (4612 kB) under category Servers

'''Trouble shooting:'''

The first time you try to run the dg module, you'll get errors such as:
Warning - DansGuardian binary file not found, maybe you need to update your module config (especially the directory paths).
(Expected location: /sbin/dansguardian)

'''Solution:'''

The problem is that the we are using different directory locations for many of the files.
So, look at the Configurable options for DansGuardian Web Content Filter (in the upper left corner of the dg page) - and nearly every path needs to be changed.

For instance, our binary is in '''/usr/sbin/dansguardian''' instead of '''/sbin/dansguardian''', so change that.

Confirm the locations for the rest of the files by running

find / -name dansguardian
results may show:
/usr/share/webmin/dansguardian
/usr/share/lintian/overrides/dansguardian
/usr/share/doc/dansguardian
/usr/share/dansguardian
/usr/sbin/dansguardian
/var/log/dansguardian
/etc/webmin/dansguardian
/etc/init.d/dansguardian
/etc/logrotate.d/dansguardian
/etc/dansguardian

When you've finished replacing all of the locations, hit save on the config page and then "stop & restart DG" on the top right of the main DG page.

Then it should work! If not, check your syslog for errors.
You should be able to check the status of DG, review logs with a good viewer, and view and edit many of the detailed configurations.

Installing Dansguardian on LinuxMCE

2009-09-13T18:54:23Z

Anupindi007:

[[Category: Tutorials]]
{| align="right"
| __TOC__
|}
===Draft page===
Still under draft and yet to finalize...
Thanks

==Basics==
DansGuardian is an award winning Open Source web content filter which currently runs on Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris. It filters the actual content of pages based on many methods including phrase matching, PICS filtering and URL filtering. It does not purely filter based on a banned list of sites like lesser totally commercial filters.

DansGuardian is designed to be completely flexible and allows you to tailor the filtering to your exact needs. It can be as draconian or as unobstructive as you want. The default settings are geared towards what a primary school might want but DansGuardian puts you in control of what you want to block.

DansGuardian is a true web content filter. We will see how to configure DansGuardian on Ubuntu Linux along with LinuxMCE.

==Installing packages==
===tinyproxy===
apt-get install tinyproxy

===shorewall===
apt-get install shorewall

===dansguardian===
apt-get install dansguardian

===dhcp===
apt-get install dhcp3-server

===dns server===
apt-get install dnsmasq

Optional:

==Dansguardian Web Log Viewer==
apt-get install dglog

==Installing webmin and dansguardian webmin module==
First you need to install the additional packages:
sudo aptitude install perl libnet-ssleay-perl openssl libauthen-pam-perl libpam-runtime libio-pty-perl libmd5-perl

Download and install webmin package:
wget http://prdownloads.sourceforge.net/webadmin/webmin_1.480_all.deb

sudo dpkg -i webmin_1.480_all.deb

==Configure Packages==
===Tinyproxy===
vi /etc/tinyproxy/tinyproxy.conf
Make the following changes
# User root
# Group root
# Allow 192.168.80.0/25

===Dansguardian===
vi /etc/dansguardian/dansguardian.conf
Make the following changes:
# Delete UNCONFIGURED line
# filterport = 8081
# proxyip = 192.168.80.1
# proxyport = 8888
# usernameidmethodproxyauth = off

===Shorewall===
Make the following changes:

'''copy configuration files (take backup of existing files):'''
cp /usr/share/doc/shorewall-common/default-config/* /etc/shorewall/

'''set "shorewall" auto start at boot time:'''
vi /etc/default/shorewall
# startup = 1

'''"zones" tells the firewall to zone each name for the rest configuration file e.g. loc, net:'''
vi /etc/shorewall/zones
# #ZONES TYPE OPTION IN OUT
# #OPTIONS OPTIONS
# fw firewall
# net ipv4
# loc ipv4
# #Last Line - ADD ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"interfaces" tells the firewall which is internal and external interfaces:'''
vi /etc/shorewall/interfaces
# #ZONE INTERFACE BROADCAST OPTIONS
# #Note assuming "eth1"- is internal ip & "eth0"- is external ip
# net eth0 detect dhcp,tcpflags
# loc eth1 detect dhcp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"masq" tells the firewall that internal network(eth1)is connected through external network(eth0):'''
vi /etc/shorewall/masq
# #INTERFACE SUBNET ADDRESS PROTO PORT(S) IPSEC
# eth0 eth1
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"policy" tells the firewall that how should handle the requests:'''
vi /etc/shorewall/policy
# loc all ACCEPT
# net all DROP
# fw all ACCEPT
# all all REJECT

'''"shorewall.conf" we will configure ip_forwarding:'''
vi /etc/shorewall/shorewall.conf
# IP_FORWARDING=On

'''"rules" allows to set firewall rules:'''
vi /etc/shorewall/rules
# SECTION NEW
# ACCEPT net fw tcp 80
# REDIRECT loc 8081 tcp www
# ACCEPT loc fw tcp 22
# ACCEPT net fw icmp
# ACCEPT loc loc icmp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

''' # check shorewall working or not properly:'''
shorewall check

==Restart Applications==
/etc/init.d/dnsmasq restart
/etc/init.d/tinyproxy restart
/etc/init.d/shorewall restart
/etc/init.d/dansguardian restart

Troubleshooting:
# Still not working restart the system once
# Check all service started are not "ps -ef | grep <service>" service - apache2, dnsmasq, tinyproxy, shorewall, dansguardian,
and dhcpd. If any of the service is not starting, start the service sh /etc/init.d.<service> start. Check especially dnsmasq
and shorewall services.

==DHCP Server==
Note: you need not to make any changes if you are working on single system or dhcp is already running on your local network interface(any changes dhcpd.conf or interfaces respective files)

vi /etc/default/dhcp3-server

# INTERFACE="eth1"

vi /etc/dhcp3/dhcpd.conf
# #change the subnet, netmask, range, dns, router as per your settings
# default-leasetime=86400
# max-leasetime=60480
# subnet 192.168.0.0 netmask 255.255.255.0{
# range 192.168.0.2 192.168.1.99;
# option domain-name-server 192.168.80.1;
# option routers 192.168.80.2;
#}

set static ip address:
vi /etc/network/interfaces
# auto lo
# iface lo inet loopback
# auto eth1
# iface eth0 inet static
# address 192.168.80.1
# netmask 255.255.255.0

#restart dhcp
# /etc/init.d/dhcpd restart

==Adding BlackList==

A BlackList is a precompiled list of sites that are deemed potentially worrisome.
cd /etc/dansguardian
wget http://urlblacklist.com/downloads/OriginalUpdateBL
vi OriginalUpdateBL
#modify line 68 by switching the listed URL with the following:
#http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist

chmod 777 /etc/dansguardian/OriginalUpdateBL
/etc/dansguardian/OriginalUpdateBL

when script is finished if you see any errors.
/etc/init.d/dansguardian restart

if the above script is not creating blacklists directory and creating blacklists file then follow the following:
cd /etc/dansguardian
wget http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist
tar -xvf bigblacklist.tar.gz
chown -R root:root blacklists
chmod -R 755 blacklists

==Webmin and Dansguardian webmin configuration==
Login into Webmin(open your web browser and enter the following):
https://192.168.80.1:10000/

Install and configure the Dansguardian Webmin module:
1.Open browser & login as madmin(sudo user) https://192.168.80.1:10000

2.Go to Webmin > Webmin Configuration > Webmin Modules
Select "From ftp or http URL" and paste the link below into the dialog box and click Install Module.
(http://downloads.sourceforge.net/project/dgwebminmodule/dgwebmin-devel/0.7.0beta1b/dgwebmin-0.7.0beta1b.wbm?use_mirror=voxel)

Observe: The following modules have been successfully installed and added to your access control list :
DansGuardian Web Content Filter in /usr/share/webmin/dansguardian (4612 kB) under category Servers

'''Trouble shooting:'''

The first time you try to run the dg module, you'll get errors such as:
Warning - DansGuardian binary file not found, maybe you need to update your module config (especially the directory paths).
(Expected location: /sbin/dansguardian)

'''Solution:'''

The problem is that the we are using different directory locations for many of the files.
So, look at the Configurable options for DansGuardian Web Content Filter (in the upper left corner of the dg page) - and nearly every path needs to be changed.

For instance, our binary is in '''/usr/sbin/dansguardian''' instead of '''/sbin/dansguardian''', so change that.

Confirm the locations for the rest of the files by running

find / -name dansguardian
results may show:
/usr/share/webmin/dansguardian
/usr/share/lintian/overrides/dansguardian
/usr/share/doc/dansguardian
/usr/share/dansguardian
/usr/sbin/dansguardian
/var/log/dansguardian
/etc/webmin/dansguardian
/etc/init.d/dansguardian
/etc/logrotate.d/dansguardian
/etc/dansguardian

When you've finished replacing all of the locations, hit save on the config page and then "stop & restart DG" on the top right of the main DG page.

Then it should work! If not, check your syslog for errors.
You should be able to check the status of DG, review logs with a good viewer, and view and edit many of the detailed configurations.

Installing Dansguardian on LinuxMCE

2009-09-13T18:50:34Z

Anupindi007: /* Webmin and Dansguardian webmin configuration */

[[Category: Tutorials]]
{| align="right"
| __TOC__
|}
===Draft page===
Still under draft and yet to finalize...
Thanks

==Basics==
DansGuardian is an award winning Open Source web content filter which currently runs on Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris. It filters the actual content of pages based on many methods including phrase matching, PICS filtering and URL filtering. It does not purely filter based on a banned list of sites like lesser totally commercial filters.

DansGuardian is designed to be completely flexible and allows you to tailor the filtering to your exact needs. It can be as draconian or as unobstructive as you want. The default settings are geared towards what a primary school might want but DansGuardian puts you in control of what you want to block.

DansGuardian is a true web content filter. We will see how to configure DansGuardian on Ubuntu Linux along with LinuxMCE.

==Installing packages==
===tinyproxy===
apt-get install tinyproxy

===shorewall===
apt-get install shorewall

===dansguardian===
apt-get install dansguardian

===dhcp===
apt-get install dhcp3-server

===dns server===
apt-get install dnsmasq

Optional:

==Dansguardian Web Log Viewer==
apt-get install dglog

==Installing webmin and dansguardian webmin module==
First you need to install the additional packages:
sudo aptitude install perl libnet-ssleay-perl openssl libauthen-pam-perl libpam-runtime libio-pty-perl libmd5-perl

Download and install webmin package:
wget http://prdownloads.sourceforge.net/webadmin/webmin_1.480_all.deb

sudo dpkg -i webmin_1.480_all.deb

==Configure Packages==
===Tinyproxy===
vi /etc/tinyproxy/tinyproxy.conf
Make the following changes
# User root
# Group root
# Allow 192.168.80.0/25

===Dansguardian===
vi /etc/dansguardian/dansguardian.conf
Make the following changes:
# Delete UNCONFIGURED line
# filterport = 8081
# proxyip = 192.168.80.1
# proxyport = 8888
# usernameidmethodproxyauth = off

===Shorewall===
Make the following changes:

'''copy configuration files (take backup of existing files):'''
cp /usr/share/doc/shorewall-common/default-config/* /etc/shorewall/

'''set "shorewall" auto start at boot time:'''
vi /etc/default/shorewall
# startup = 1

'''"zones" tells the firewall to zone each name for the rest configuration file e.g. loc, net:'''
vi /etc/shorewall/zones
# #ZONES TYPE OPTION IN OUT
# #OPTIONS OPTIONS
# fw firewall
# net ipv4
# loc ipv4
# #Last Line - ADD ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"interfaces" tells the firewall which is internal and external interfaces:'''
vi /etc/shorewall/interfaces
# #ZONE INTERFACE BROADCAST OPTIONS
# #Note assuming "eth1"- is internal ip & "eth0"- is external ip
# net eth0 detect dhcp,tcpflags
# loc eth1 detect dhcp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"masq" tells the firewall that internal network(eth1)is connected through external network(eth0):'''
vi /etc/shorewall/masq
# #INTERFACE SUBNET ADDRESS PROTO PORT(S) IPSEC
# eth0 eth1
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"policy" tells the firewall that how should handle the requests:'''
vi /etc/shorewall/policy
# loc all ACCEPT
# net all DROP
# fw all ACCEPT
# all all REJECT

'''"shorewall.conf" we will configure ip_forwarding:'''
vi /etc/shorewall/shorewall.conf
# IP_FORWARDING=On

'''"rules" allows to set firewall rules:'''
vi /etc/shorewall/rules
# SECTION NEW
# ACCEPT net fw tcp 80
# REDIRECT loc 8081 tcp www
# ACCEPT loc fw tcp 22
# ACCEPT net fw icmp
# ACCEPT loc loc icmp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

''' # check shorewall working or not properly:'''
shorewall check

==Restart Applications==
/etc/init.d/dnsmasq restart
/etc/init.d/tinyproxy restart
/etc/init.d/shorewall restart
/etc/init.d/dansguardian restart

==DHCP Server==
Note: you need not to make any changes if you are working on single system or dhcp is already running on your local network interface(any changes dhcpd.conf or interfaces respective files)

vi /etc/default/dhcp3-server

# INTERFACE="eth1"

vi /etc/dhcp3/dhcpd.conf
# #change the subnet, netmask, range, dns, router as per your settings
# default-leasetime=86400
# max-leasetime=60480
# subnet 192.168.0.0 netmask 255.255.255.0{
# range 192.168.0.2 192.168.1.99;
# option domain-name-server 192.168.80.1;
# option routers 192.168.80.2;
#}

set static ip address:
vi /etc/network/interfaces
# auto lo
# iface lo inet loopback
# auto eth1
# iface eth0 inet static
# address 192.168.80.1
# netmask 255.255.255.0

#restart dhcp
# /etc/init.d/dhcpd restart

==Adding BlackList==

A BlackList is a precompiled list of sites that are deemed potentially worrisome.
cd /etc/dansguardian
wget http://urlblacklist.com/downloads/OriginalUpdateBL
vi OriginalUpdateBL
#modify line 68 by switching the listed URL with the following:
#http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist

chmod 777 /etc/dansguardian/OriginalUpdateBL
/etc/dansguardian/OriginalUpdateBL

when script is finished if you see any errors.
/etc/init.d/dansguardian restart

if the above script is not creating blacklists directory and creating blacklists file then follow the following:
cd /etc/dansguardian
wget http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist
tar -xvf bigblacklist.tar.gz
chown -R root:root blacklists
chmod -R 755 blacklists

==Webmin and Dansguardian webmin configuration==
Login into Webmin(open your web browser and enter the following):
https://192.168.80.1:10000/

Install and configure the Dansguardian Webmin module:
1.Open browser & login as madmin(sudo user) https://192.168.80.1:10000

2.Go to Webmin > Webmin Configuration > Webmin Modules
Select "From ftp or http URL" and paste the link below into the dialog box and click Install Module.
(http://downloads.sourceforge.net/project/dgwebminmodule/dgwebmin-devel/0.7.0beta1b/dgwebmin-0.7.0beta1b.wbm?use_mirror=voxel)

Observe: The following modules have been successfully installed and added to your access control list :
DansGuardian Web Content Filter in /usr/share/webmin/dansguardian (4612 kB) under category Servers

'''Trouble shooting:'''

The first time you try to run the dg module, you'll get errors such as:
Warning - DansGuardian binary file not found, maybe you need to update your module config (especially the directory paths).
(Expected location: /sbin/dansguardian)

'''Solution:'''

The problem is that the we are using different directory locations for many of the files.
So, look at the Configurable options for DansGuardian Web Content Filter (in the upper left corner of the dg page) - and nearly every path needs to be changed.

For instance, our binary is in '''/usr/sbin/dansguardian''' instead of '''/sbin/dansguardian''', so change that.

Confirm the locations for the rest of the files by running

find / -name dansguardian
results may show:
/usr/share/webmin/dansguardian
/usr/share/lintian/overrides/dansguardian
/usr/share/doc/dansguardian
/usr/share/dansguardian
/usr/sbin/dansguardian
/var/log/dansguardian
/etc/webmin/dansguardian
/etc/init.d/dansguardian
/etc/logrotate.d/dansguardian
/etc/dansguardian

When you've finished replacing all of the locations, hit save on the config page and then "stop & restart DG" on the top right of the main DG page.

Then it should work! If not, check your syslog for errors.
You should be able to check the status of DG, review logs with a good viewer, and view and edit many of the detailed configurations.

==Troubleshooting==
# Still not working restart the system once
# Check all service started are not "ps -ef | grep <service>" service - apache2, dnsmasq, tinyproxy, shorewall, dansguardian, and dhcpd. If any of the service is not starting, start the service sh /etc/init.d.<service> start. Check especially dnsmasq and shorewall services.

Installing Dansguardian on LinuxMCE

2009-09-13T18:32:40Z

Anupindi007: /* Webmin and Dansguardian webmin configuration */

[[Category: Tutorials]]
{| align="right"
| __TOC__
|}
===Draft page===
Still under draft and yet to finalize...
Thanks

==Basics==
DansGuardian is an award winning Open Source web content filter which currently runs on Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris. It filters the actual content of pages based on many methods including phrase matching, PICS filtering and URL filtering. It does not purely filter based on a banned list of sites like lesser totally commercial filters.

DansGuardian is designed to be completely flexible and allows you to tailor the filtering to your exact needs. It can be as draconian or as unobstructive as you want. The default settings are geared towards what a primary school might want but DansGuardian puts you in control of what you want to block.

DansGuardian is a true web content filter. We will see how to configure DansGuardian on Ubuntu Linux along with LinuxMCE.

==Installing packages==
===tinyproxy===
apt-get install tinyproxy

===shorewall===
apt-get install shorewall

===dansguardian===
apt-get install dansguardian

===dhcp===
apt-get install dhcp3-server

===dns server===
apt-get install dnsmasq

Optional:

==Dansguardian Web Log Viewer==
apt-get install dglog

==Installing webmin and dansguardian webmin module==
First you need to install the additional packages:
sudo aptitude install perl libnet-ssleay-perl openssl libauthen-pam-perl libpam-runtime libio-pty-perl libmd5-perl

Download and install webmin package:
wget http://prdownloads.sourceforge.net/webadmin/webmin_1.480_all.deb

sudo dpkg -i webmin_1.480_all.deb

==Configure Packages==
===Tinyproxy===
vi /etc/tinyproxy/tinyproxy.conf
Make the following changes
# User root
# Group root
# Allow 192.168.80.0/25

===Dansguardian===
vi /etc/dansguardian/dansguardian.conf
Make the following changes:
# Delete UNCONFIGURED line
# filterport = 8081
# proxyip = 192.168.80.1
# proxyport = 8888
# usernameidmethodproxyauth = off

===Shorewall===
Make the following changes:

'''copy configuration files (take backup of existing files):'''
cp /usr/share/doc/shorewall-common/default-config/* /etc/shorewall/

'''set "shorewall" auto start at boot time:'''
vi /etc/default/shorewall
# startup = 1

'''"zones" tells the firewall to zone each name for the rest configuration file e.g. loc, net:'''
vi /etc/shorewall/zones
# #ZONES TYPE OPTION IN OUT
# #OPTIONS OPTIONS
# fw firewall
# net ipv4
# loc ipv4
# #Last Line - ADD ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"interfaces" tells the firewall which is internal and external interfaces:'''
vi /etc/shorewall/interfaces
# #ZONE INTERFACE BROADCAST OPTIONS
# #Note assuming "eth1"- is internal ip & "eth0"- is external ip
# net eth0 detect dhcp,tcpflags
# loc eth1 detect dhcp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"masq" tells the firewall that internal network(eth1)is connected through external network(eth0):'''
vi /etc/shorewall/masq
# #INTERFACE SUBNET ADDRESS PROTO PORT(S) IPSEC
# eth0 eth1
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"policy" tells the firewall that how should handle the requests:'''
vi /etc/shorewall/policy
# loc all ACCEPT
# net all DROP
# fw all ACCEPT
# all all REJECT

'''"shorewall.conf" we will configure ip_forwarding:'''
vi /etc/shorewall/shorewall.conf
# IP_FORWARDING=On

'''"rules" allows to set firewall rules:'''
vi /etc/shorewall/rules
# SECTION NEW
# ACCEPT net fw tcp 80
# REDIRECT loc 8081 tcp www
# ACCEPT loc fw tcp 22
# ACCEPT net fw icmp
# ACCEPT loc loc icmp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

''' # check shorewall working or not properly:'''
shorewall check

==Restart Applications==
/etc/init.d/dnsmasq restart
/etc/init.d/tinyproxy restart
/etc/init.d/shorewall restart
/etc/init.d/dansguardian restart

==DHCP Server==
Note: you need not to make any changes if you are working on single system or dhcp is already running on your local network interface(any changes dhcpd.conf or interfaces respective files)

vi /etc/default/dhcp3-server

# INTERFACE="eth1"

vi /etc/dhcp3/dhcpd.conf
# #change the subnet, netmask, range, dns, router as per your settings
# default-leasetime=86400
# max-leasetime=60480
# subnet 192.168.0.0 netmask 255.255.255.0{
# range 192.168.0.2 192.168.1.99;
# option domain-name-server 192.168.80.1;
# option routers 192.168.80.2;
#}

set static ip address:
vi /etc/network/interfaces
# auto lo
# iface lo inet loopback
# auto eth1
# iface eth0 inet static
# address 192.168.80.1
# netmask 255.255.255.0

#restart dhcp
# /etc/init.d/dhcpd restart

==Adding BlackList==

A BlackList is a precompiled list of sites that are deemed potentially worrisome.
cd /etc/dansguardian
wget http://urlblacklist.com/downloads/OriginalUpdateBL
vi OriginalUpdateBL
#modify line 68 by switching the listed URL with the following:
#http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist

chmod 777 /etc/dansguardian/OriginalUpdateBL
/etc/dansguardian/OriginalUpdateBL

when script is finished if you see any errors.
/etc/init.d/dansguardian restart

if the above script is not creating blacklists directory and creating blacklists file then follow the following:
cd /etc/dansguardian
wget http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist
tar -xvf bigblacklist.tar.gz
chown -R root:root blacklists
chmod -R 755 blacklists

==Webmin and Dansguardian webmin configuration==
Login into Webmin(open your web browser and enter the following):
https://192.168.80.1:10000/

Install and configure the Dansguardian Webmin module:
Open browser & login as maadmin(sudo user) https://192.168.80.1:10000

Go to Webmin > Webmin Configuration > Webmin Modules

Select "From ftp or http URL" and paste the link below into the dialog box and click Install Module. (http://downloads.sourceforge.net/project/dgwebminmodule/dgwebmin-devel/0.7.0beta1b/dgwebmin-0.7.0beta1b.wbm?use_mirror=voxel)

The following modules have been successfully installed and added to your access control list :
DansGuardian Web Content Filter in /usr/share/webmin/dansguardian (4612 kB) under category Servers

The first time you try to run the dg module, you'll get errors such as:
Warning - DansGuardian binary file not found, maybe you need to update your module config (especially the directory paths). (Expected location: /sbin/dansguardian)

The problem is that the we are using differnet directory locations for many of the files.

So, look at the Configurable options for DansGuardian Web Content Filter (in the upper left corner of the dg page) - and nearly every path needs to be changed. For instance, our binary is in /usr/sbin/dansguardian instead of /sbin/dansguardian, so change that.

Confirm the locations for the rest of the files by running #find as follows (or just use these locations)
dcerouter_1001275:/usr/local/sbin# find / -name dansguardian
/usr/share/webmin/dansguardian
/usr/share/lintian/overrides/dansguardian
/usr/share/doc/dansguardian
/usr/share/dansguardian
/usr/sbin/dansguardian
/var/log/dansguardian
/etc/webmin/dansguardian
/etc/init.d/dansguardian
/etc/logrotate.d/dansguardian
/etc/dansguardian
dcerouter_1001275:/usr/local/sbin#

When you've finished replacing all of the locations, hit save on the config page and then "stop & restart DG" on the top right of the main DG page.

Then it should work! If not, check your syslog for errors.
You should be able to check the status of DG, review logs with a good viewer, and view and edit many of the detailed configurations.

==Troubleshooting==
# Still not working restart the system once
# Check all service started are not "ps -ef | grep <service>" service - apache2, dnsmasq, tinyproxy, shorewall, dansguardian, and dhcpd. If any of the service is not starting, start the service sh /etc/init.d.<service> start. Check especially dnsmasq and shorewall services.

Installing Dansguardian on LinuxMCE

2009-09-13T18:20:58Z

Anupindi007: /* Webmin and Dansguardian webmin configuration */

[[Category: Tutorials]]
{| align="right"
| __TOC__
|}
===Draft page===
Still under draft and yet to finalize...
Thanks

==Basics==
DansGuardian is an award winning Open Source web content filter which currently runs on Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris. It filters the actual content of pages based on many methods including phrase matching, PICS filtering and URL filtering. It does not purely filter based on a banned list of sites like lesser totally commercial filters.

DansGuardian is designed to be completely flexible and allows you to tailor the filtering to your exact needs. It can be as draconian or as unobstructive as you want. The default settings are geared towards what a primary school might want but DansGuardian puts you in control of what you want to block.

DansGuardian is a true web content filter. We will see how to configure DansGuardian on Ubuntu Linux along with LinuxMCE.

==Installing packages==
===tinyproxy===
apt-get install tinyproxy

===shorewall===
apt-get install shorewall

===dansguardian===
apt-get install dansguardian

===dhcp===
apt-get install dhcp3-server

===dns server===
apt-get install dnsmasq

Optional:

==Dansguardian Web Log Viewer==
apt-get install dglog

==Installing webmin and dansguardian webmin module==
First you need to install the additional packages:
sudo aptitude install perl libnet-ssleay-perl openssl libauthen-pam-perl libpam-runtime libio-pty-perl libmd5-perl

Download and install webmin package:
wget http://prdownloads.sourceforge.net/webadmin/webmin_1.480_all.deb

sudo dpkg -i webmin_1.480_all.deb

==Configure Packages==
===Tinyproxy===
vi /etc/tinyproxy/tinyproxy.conf
Make the following changes
# User root
# Group root
# Allow 192.168.80.0/25

===Dansguardian===
vi /etc/dansguardian/dansguardian.conf
Make the following changes:
# Delete UNCONFIGURED line
# filterport = 8081
# proxyip = 192.168.80.1
# proxyport = 8888
# usernameidmethodproxyauth = off

===Shorewall===
Make the following changes:

'''copy configuration files (take backup of existing files):'''
cp /usr/share/doc/shorewall-common/default-config/* /etc/shorewall/

'''set "shorewall" auto start at boot time:'''
vi /etc/default/shorewall
# startup = 1

'''"zones" tells the firewall to zone each name for the rest configuration file e.g. loc, net:'''
vi /etc/shorewall/zones
# #ZONES TYPE OPTION IN OUT
# #OPTIONS OPTIONS
# fw firewall
# net ipv4
# loc ipv4
# #Last Line - ADD ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"interfaces" tells the firewall which is internal and external interfaces:'''
vi /etc/shorewall/interfaces
# #ZONE INTERFACE BROADCAST OPTIONS
# #Note assuming "eth1"- is internal ip & "eth0"- is external ip
# net eth0 detect dhcp,tcpflags
# loc eth1 detect dhcp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"masq" tells the firewall that internal network(eth1)is connected through external network(eth0):'''
vi /etc/shorewall/masq
# #INTERFACE SUBNET ADDRESS PROTO PORT(S) IPSEC
# eth0 eth1
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"policy" tells the firewall that how should handle the requests:'''
vi /etc/shorewall/policy
# loc all ACCEPT
# net all DROP
# fw all ACCEPT
# all all REJECT

'''"shorewall.conf" we will configure ip_forwarding:'''
vi /etc/shorewall/shorewall.conf
# IP_FORWARDING=On

'''"rules" allows to set firewall rules:'''
vi /etc/shorewall/rules
# SECTION NEW
# ACCEPT net fw tcp 80
# REDIRECT loc 8081 tcp www
# ACCEPT loc fw tcp 22
# ACCEPT net fw icmp
# ACCEPT loc loc icmp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

''' # check shorewall working or not properly:'''
shorewall check

==Restart Applications==
/etc/init.d/dnsmasq restart
/etc/init.d/tinyproxy restart
/etc/init.d/shorewall restart
/etc/init.d/dansguardian restart

==DHCP Server==
Note: you need not to make any changes if you are working on single system or dhcp is already running on your local network interface(any changes dhcpd.conf or interfaces respective files)

vi /etc/default/dhcp3-server

# INTERFACE="eth1"

vi /etc/dhcp3/dhcpd.conf
# #change the subnet, netmask, range, dns, router as per your settings
# default-leasetime=86400
# max-leasetime=60480
# subnet 192.168.0.0 netmask 255.255.255.0{
# range 192.168.0.2 192.168.1.99;
# option domain-name-server 192.168.80.1;
# option routers 192.168.80.2;
#}

set static ip address:
vi /etc/network/interfaces
# auto lo
# iface lo inet loopback
# auto eth1
# iface eth0 inet static
# address 192.168.80.1
# netmask 255.255.255.0

#restart dhcp
# /etc/init.d/dhcpd restart

==Adding BlackList==

A BlackList is a precompiled list of sites that are deemed potentially worrisome.
cd /etc/dansguardian
wget http://urlblacklist.com/downloads/OriginalUpdateBL
vi OriginalUpdateBL
#modify line 68 by switching the listed URL with the following:
#http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist

chmod 777 /etc/dansguardian/OriginalUpdateBL
/etc/dansguardian/OriginalUpdateBL

when script is finished if you see any errors.
/etc/init.d/dansguardian restart

if the above script is not creating blacklists directory and creating blacklists file then follow the following:
cd /etc/dansguardian
wget http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist
tar -xvf bigblacklist.tar.gz
chown -R root:root blacklists
chmod -R 755 blacklists

==Webmin and Dansguardian webmin configuration==
Login into Webmin(open your web browser and enter the following):
https://192.168.80.1:10000/

==Troubleshooting==
# Still not working restart the system once
# Check all service started are not "ps -ef | grep <service>" service - apache2, dnsmasq, tinyproxy, shorewall, dansguardian, and dhcpd. If any of the service is not starting, start the service sh /etc/init.d.<service> start. Check especially dnsmasq and shorewall services.

Installing Dansguardian on LinuxMCE

2009-09-13T18:13:31Z

Anupindi007:

[[Category: Tutorials]]
{| align="right"
| __TOC__
|}
===Draft page===
Still under draft and yet to finalize...
Thanks

==Basics==
DansGuardian is an award winning Open Source web content filter which currently runs on Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris. It filters the actual content of pages based on many methods including phrase matching, PICS filtering and URL filtering. It does not purely filter based on a banned list of sites like lesser totally commercial filters.

DansGuardian is designed to be completely flexible and allows you to tailor the filtering to your exact needs. It can be as draconian or as unobstructive as you want. The default settings are geared towards what a primary school might want but DansGuardian puts you in control of what you want to block.

DansGuardian is a true web content filter. We will see how to configure DansGuardian on Ubuntu Linux along with LinuxMCE.

==Installing packages==
===tinyproxy===
apt-get install tinyproxy

===shorewall===
apt-get install shorewall

===dansguardian===
apt-get install dansguardian

===dhcp===
apt-get install dhcp3-server

===dns server===
apt-get install dnsmasq

Optional:

==Dansguardian Web Log Viewer==
apt-get install dglog

==Installing webmin and dansguardian webmin module==
First you need to install the additional packages:
sudo aptitude install perl libnet-ssleay-perl openssl libauthen-pam-perl libpam-runtime libio-pty-perl libmd5-perl

Download and install webmin package:
wget http://prdownloads.sourceforge.net/webadmin/webmin_1.480_all.deb

sudo dpkg -i webmin_1.480_all.deb

==Configure Packages==
===Tinyproxy===
vi /etc/tinyproxy/tinyproxy.conf
Make the following changes
# User root
# Group root
# Allow 192.168.80.0/25

===Dansguardian===
vi /etc/dansguardian/dansguardian.conf
Make the following changes:
# Delete UNCONFIGURED line
# filterport = 8081
# proxyip = 192.168.80.1
# proxyport = 8888
# usernameidmethodproxyauth = off

===Shorewall===
Make the following changes:

'''copy configuration files (take backup of existing files):'''
cp /usr/share/doc/shorewall-common/default-config/* /etc/shorewall/

'''set "shorewall" auto start at boot time:'''
vi /etc/default/shorewall
# startup = 1

'''"zones" tells the firewall to zone each name for the rest configuration file e.g. loc, net:'''
vi /etc/shorewall/zones
# #ZONES TYPE OPTION IN OUT
# #OPTIONS OPTIONS
# fw firewall
# net ipv4
# loc ipv4
# #Last Line - ADD ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"interfaces" tells the firewall which is internal and external interfaces:'''
vi /etc/shorewall/interfaces
# #ZONE INTERFACE BROADCAST OPTIONS
# #Note assuming "eth1"- is internal ip & "eth0"- is external ip
# net eth0 detect dhcp,tcpflags
# loc eth1 detect dhcp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"masq" tells the firewall that internal network(eth1)is connected through external network(eth0):'''
vi /etc/shorewall/masq
# #INTERFACE SUBNET ADDRESS PROTO PORT(S) IPSEC
# eth0 eth1
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"policy" tells the firewall that how should handle the requests:'''
vi /etc/shorewall/policy
# loc all ACCEPT
# net all DROP
# fw all ACCEPT
# all all REJECT

'''"shorewall.conf" we will configure ip_forwarding:'''
vi /etc/shorewall/shorewall.conf
# IP_FORWARDING=On

'''"rules" allows to set firewall rules:'''
vi /etc/shorewall/rules
# SECTION NEW
# ACCEPT net fw tcp 80
# REDIRECT loc 8081 tcp www
# ACCEPT loc fw tcp 22
# ACCEPT net fw icmp
# ACCEPT loc loc icmp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

''' # check shorewall working or not properly:'''
shorewall check

==Restart Applications==
/etc/init.d/dnsmasq restart
/etc/init.d/tinyproxy restart
/etc/init.d/shorewall restart
/etc/init.d/dansguardian restart

==DHCP Server==
Note: you need not to make any changes if you are working on single system or dhcp is already running on your local network interface(any changes dhcpd.conf or interfaces respective files)

vi /etc/default/dhcp3-server

# INTERFACE="eth1"

vi /etc/dhcp3/dhcpd.conf
# #change the subnet, netmask, range, dns, router as per your settings
# default-leasetime=86400
# max-leasetime=60480
# subnet 192.168.0.0 netmask 255.255.255.0{
# range 192.168.0.2 192.168.1.99;
# option domain-name-server 192.168.80.1;
# option routers 192.168.80.2;
#}

set static ip address:
vi /etc/network/interfaces
# auto lo
# iface lo inet loopback
# auto eth1
# iface eth0 inet static
# address 192.168.80.1
# netmask 255.255.255.0

#restart dhcp
# /etc/init.d/dhcpd restart

==Adding BlackList==

A BlackList is a precompiled list of sites that are deemed potentially worrisome.
cd /etc/dansguardian
wget http://urlblacklist.com/downloads/OriginalUpdateBL
vi OriginalUpdateBL
#modify line 68 by switching the listed URL with the following:
#http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist

chmod 777 /etc/dansguardian/OriginalUpdateBL
/etc/dansguardian/OriginalUpdateBL

when script is finished if you see any errors.
/etc/init.d/dansguardian restart

if the above script is not creating blacklists directory and creating blacklists file then follow the following:
cd /etc/dansguardian
wget http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist
tar -xvf bigblacklist.tar.gz
chown -R root:root blacklists
chmod -R 755 blacklists

==Webmin and Dansguardian webmin configuration==
#

==Troubleshooting==
# Still not working restart the system once
# Check all service started are not "ps -ef | grep <service>" service - apache2, dnsmasq, tinyproxy, shorewall, dansguardian, and dhcpd. If any of the service is not starting, start the service sh /etc/init.d.<service> start. Check especially dnsmasq and shorewall services.

Installing Dansguardian on LinuxMCE

2009-09-13T18:10:20Z

Anupindi007: /* Installing webmin and dansguardian webmin module */

[[Category: Tutorials]]
{| align="right"
| __TOC__
|}
===Draft page===
Still under draft and yet to finalize...
Thanks

==Basics==
DansGuardian is an award winning Open Source web content filter which currently runs on Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris. It filters the actual content of pages based on many methods including phrase matching, PICS filtering and URL filtering. It does not purely filter based on a banned list of sites like lesser totally commercial filters.

DansGuardian is designed to be completely flexible and allows you to tailor the filtering to your exact needs. It can be as draconian or as unobstructive as you want. The default settings are geared towards what a primary school might want but DansGuardian puts you in control of what you want to block.

DansGuardian is a true web content filter. We will see how to configure DansGuardian on Ubuntu Linux along with LinuxMCE.

==Installing packages==
===tinyproxy===
apt-get install tinyproxy

===shorewall===
apt-get install shorewall

===dansguardian===
apt-get install dansguardian

===dhcp===
apt-get install dhcp3-server

===dns server===
apt-get install dnsmasq

Optional:

==Dansguardian Web Log Viewer==
apt-get install dglog

==Installing webmin and dansguardian webmin module==
First you need to install the additional packages:
sudo aptitude install perl libnet-ssleay-perl openssl libauthen-pam-perl libpam-runtime libio-pty-perl libmd5-perl

Download and install webmin package:
wget http://prdownloads.sourceforge.net/webadmin/webmin_1.480_all.deb

sudo dpkg -i webmin_1.480_all.deb

==Configure Packages==
===Tinyproxy===
vi /etc/tinyproxy/tinyproxy.conf
Make the following changes
# User root
# Group root
# Allow 192.168.80.0/25

===Dansguardian===
vi /etc/dansguardian/dansguardian.conf
Make the following changes:
# Delete UNCONFIGURED line
# filterport = 8081
# proxyip = 192.168.80.1
# proxyport = 8888
# usernameidmethodproxyauth = off

===Shorewall===
Make the following changes:

'''copy configuration files (take backup of existing files):'''
cp /usr/share/doc/shorewall-common/default-config/* /etc/shorewall/

'''set "shorewall" auto start at boot time:'''
vi /etc/default/shorewall
# startup = 1

'''"zones" tells the firewall to zone each name for the rest configuration file e.g. loc, net:'''
vi /etc/shorewall/zones
# #ZONES TYPE OPTION IN OUT
# #OPTIONS OPTIONS
# fw firewall
# net ipv4
# loc ipv4
# #Last Line - ADD ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"interfaces" tells the firewall which is internal and external interfaces:'''
vi /etc/shorewall/interfaces
# #ZONE INTERFACE BROADCAST OPTIONS
# #Note assuming "eth1"- is internal ip & "eth0"- is external ip
# net eth0 detect dhcp,tcpflags
# loc eth1 detect dhcp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"masq" tells the firewall that internal network(eth1)is connected through external network(eth0):'''
vi /etc/shorewall/masq
# #INTERFACE SUBNET ADDRESS PROTO PORT(S) IPSEC
# eth0 eth1
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"policy" tells the firewall that how should handle the requests:'''
vi /etc/shorewall/policy
# loc all ACCEPT
# net all DROP
# fw all ACCEPT
# all all REJECT

'''"shorewall.conf" we will configure ip_forwarding:'''
vi /etc/shorewall/shorewall.conf
# IP_FORWARDING=On

'''"rules" allows to set firewall rules:'''
vi /etc/shorewall/rules
# SECTION NEW
# ACCEPT net fw tcp 80
# REDIRECT loc 8081 tcp www
# ACCEPT loc fw tcp 22
# ACCEPT net fw icmp
# ACCEPT loc loc icmp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

''' # check shorewall working or not properly:'''
shorewall check

==Restart Applications==
/etc/init.d/dnsmasq restart
/etc/init.d/tinyproxy restart
/etc/init.d/shorewall restart
/etc/init.d/dansguardian restart

==DHCP Server==
Note: you need not to make any changes if you are working on single system or dhcp is already running on your local network interface(any changes dhcpd.conf or interfaces respective files)

vi /etc/default/dhcp3-server

# INTERFACE="eth1"

vi /etc/dhcp3/dhcpd.conf
# #change the subnet, netmask, range, dns, router as per your settings
# default-leasetime=86400
# max-leasetime=60480
# subnet 192.168.0.0 netmask 255.255.255.0{
# range 192.168.0.2 192.168.1.99;
# option domain-name-server 192.168.80.1;
# option routers 192.168.80.2;
#}

set static ip address:
vi /etc/network/interfaces
# auto lo
# iface lo inet loopback
# auto eth1
# iface eth0 inet static
# address 192.168.80.1
# netmask 255.255.255.0

#restart dhcp
# /etc/init.d/dhcpd restart

==Troubleshooting==
# Still not working restart the system once
# Check all service started are not "ps -ef | grep <service>" service - apache2, dnsmasq, tinyproxy, shorewall, dansguardian, and dhcpd. If any of the service is not starting, start the service sh /etc/init.d.<service> start. Check especially dnsmasq and shorewall services.

==Adding BlackList==

A BlackList is a precompiled list of sites that are deemed potentially worrisome.
cd /etc/dansguardian
wget http://urlblacklist.com/downloads/OriginalUpdateBL
vi OriginalUpdateBL
#modify line 68 by switching the listed URL with the following:
#http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist

chmod 777 /etc/dansguardian/OriginalUpdateBL
/etc/dansguardian/OriginalUpdateBL

when script is finished if you see any errors.
/etc/init.d/dansguardian restart

if the above script is not creating blacklists directory and creating blacklists file then follow the following:
cd /etc/dansguardian
wget http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist
tar -xvf bigblacklist.tar.gz
chown -R root:root blacklists
chmod -R 755 blacklists

Installing Dansguardian on LinuxMCE

2009-09-13T18:02:40Z

Anupindi007:

[[Category: Tutorials]]
{| align="right"
| __TOC__
|}
===Draft page===
Still under draft and yet to finalize...
Thanks

==Basics==
DansGuardian is an award winning Open Source web content filter which currently runs on Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris. It filters the actual content of pages based on many methods including phrase matching, PICS filtering and URL filtering. It does not purely filter based on a banned list of sites like lesser totally commercial filters.

DansGuardian is designed to be completely flexible and allows you to tailor the filtering to your exact needs. It can be as draconian or as unobstructive as you want. The default settings are geared towards what a primary school might want but DansGuardian puts you in control of what you want to block.

DansGuardian is a true web content filter. We will see how to configure DansGuardian on Ubuntu Linux along with LinuxMCE.

==Installing packages==
===tinyproxy===
apt-get install tinyproxy

===shorewall===
apt-get install shorewall

===dansguardian===
apt-get install dansguardian

===dhcp===
apt-get install dhcp3-server

===dns server===
apt-get install dnsmasq

Optional:

==Dansguardian Web Log Viewer==
apt-get install dglog

==Installing webmin and dansguardian webmin module==
First you need to install the additional packages:
sudo aptitude install perl libnet-ssleay-perl openssl libauthen-pam-perl libpam-runtime libio-pty-perl libmd5-perl

Download the latest webmin package:
wget http://prdownloads.sourceforge.net/webadmin/webmin_1.480_all.deb

Install webmin package:
sudo dpkg -i webmin_1.480_all.deb

==Configure Packages==
===Tinyproxy===
vi /etc/tinyproxy/tinyproxy.conf
Make the following changes
# User root
# Group root
# Allow 192.168.80.0/25

===Dansguardian===
vi /etc/dansguardian/dansguardian.conf
Make the following changes:
# Delete UNCONFIGURED line
# filterport = 8081
# proxyip = 192.168.80.1
# proxyport = 8888
# usernameidmethodproxyauth = off

===Shorewall===
Make the following changes:

'''copy configuration files (take backup of existing files):'''
cp /usr/share/doc/shorewall-common/default-config/* /etc/shorewall/

'''set "shorewall" auto start at boot time:'''
vi /etc/default/shorewall
# startup = 1

'''"zones" tells the firewall to zone each name for the rest configuration file e.g. loc, net:'''
vi /etc/shorewall/zones
# #ZONES TYPE OPTION IN OUT
# #OPTIONS OPTIONS
# fw firewall
# net ipv4
# loc ipv4
# #Last Line - ADD ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"interfaces" tells the firewall which is internal and external interfaces:'''
vi /etc/shorewall/interfaces
# #ZONE INTERFACE BROADCAST OPTIONS
# #Note assuming "eth1"- is internal ip & "eth0"- is external ip
# net eth0 detect dhcp,tcpflags
# loc eth1 detect dhcp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"masq" tells the firewall that internal network(eth1)is connected through external network(eth0):'''
vi /etc/shorewall/masq
# #INTERFACE SUBNET ADDRESS PROTO PORT(S) IPSEC
# eth0 eth1
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"policy" tells the firewall that how should handle the requests:'''
vi /etc/shorewall/policy
# loc all ACCEPT
# net all DROP
# fw all ACCEPT
# all all REJECT

'''"shorewall.conf" we will configure ip_forwarding:'''
vi /etc/shorewall/shorewall.conf
# IP_FORWARDING=On

'''"rules" allows to set firewall rules:'''
vi /etc/shorewall/rules
# SECTION NEW
# ACCEPT net fw tcp 80
# REDIRECT loc 8081 tcp www
# ACCEPT loc fw tcp 22
# ACCEPT net fw icmp
# ACCEPT loc loc icmp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

''' # check shorewall working or not properly:'''
shorewall check

==Restart Applications==
/etc/init.d/dnsmasq restart
/etc/init.d/tinyproxy restart
/etc/init.d/shorewall restart
/etc/init.d/dansguardian restart

==DHCP Server==
Note: you need not to make any changes if you are working on single system or dhcp is already running on your local network interface(any changes dhcpd.conf or interfaces respective files)

vi /etc/default/dhcp3-server

# INTERFACE="eth1"

vi /etc/dhcp3/dhcpd.conf
# #change the subnet, netmask, range, dns, router as per your settings
# default-leasetime=86400
# max-leasetime=60480
# subnet 192.168.0.0 netmask 255.255.255.0{
# range 192.168.0.2 192.168.1.99;
# option domain-name-server 192.168.80.1;
# option routers 192.168.80.2;
#}

set static ip address:
vi /etc/network/interfaces
# auto lo
# iface lo inet loopback
# auto eth1
# iface eth0 inet static
# address 192.168.80.1
# netmask 255.255.255.0

#restart dhcp
# /etc/init.d/dhcpd restart

==Troubleshooting==
# Still not working restart the system once
# Check all service started are not "ps -ef | grep <service>" service - apache2, dnsmasq, tinyproxy, shorewall, dansguardian, and dhcpd. If any of the service is not starting, start the service sh /etc/init.d.<service> start. Check especially dnsmasq and shorewall services.

==Adding BlackList==

A BlackList is a precompiled list of sites that are deemed potentially worrisome.
cd /etc/dansguardian
wget http://urlblacklist.com/downloads/OriginalUpdateBL
vi OriginalUpdateBL
#modify line 68 by switching the listed URL with the following:
#http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist

chmod 777 /etc/dansguardian/OriginalUpdateBL
/etc/dansguardian/OriginalUpdateBL

when script is finished if you see any errors.
/etc/init.d/dansguardian restart

if the above script is not creating blacklists directory and creating blacklists file then follow the following:
cd /etc/dansguardian
wget http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist
tar -xvf bigblacklist.tar.gz
chown -R root:root blacklists
chmod -R 755 blacklists

Installing Dansguardian on LinuxMCE

2009-09-13T17:40:48Z

Anupindi007: /* Shorewall */

Installing Dansguardian on LinuxMCE

2009-09-01T00:59:59Z

Anupindi007:

{| align="right"
| __TOC__
|}
===Draft page===
Still under draft and yet to finalize...
Thanks

==Basics==
DansGuardian is an award winning Open Source web content filter which currently runs on Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris. It filters the actual content of pages based on many methods including phrase matching, PICS filtering and URL filtering. It does not purely filter based on a banned list of sites like lesser totally commercial filters.

DansGuardian is designed to be completely flexible and allows you to tailor the filtering to your exact needs. It can be as draconian or as unobstructive as you want. The default settings are geared towards what a primary school might want but DansGuardian puts you in control of what you want to block.

DansGuardian is a true web content filter. We will see how to configure DansGuardian on Ubuntu Linux along with LinuxMCE.

==Installing packages==
===tinyproxy===
apt-get install tinyproxy

===shorewall===
apt-get install shorewall

===dansguardian===
apt-get install dansguardian

===dhcp===
apt-get install dhcp3-server

===dns server===
apt-get install dnsmasq

Optional:

==Dansguardian Web Log Viewer==
apt-get install dglog

==Configure Packages==
===Tinyproxy===
vi /etc/tinyproxy/tinyproxy.conf
Make the following changes
# User root
# Group root
# Allow 192.168.80.0/25

===Dansguardian===
vi /etc/dansguardian/dansguardian.conf
Make the following changes:
# Delete UNCONFIGURED line
# filterport = 8081
# proxyip = 192.168.80.1
# proxyport = 8888
# usernameidmethodproxyauth = off

===Shorewall===
Make the following changes:

'''set "shorewall" auto start at boot time:'''
vi /etc/default/shorewall
# startup = 1

'''"zones" tells the firewall to zone each name for the rest configuration file e.g. loc, net:'''
vi /etc/shorewall/zones
# #ZONES TYPE OPTION IN OUT
# #OPTIONS OPTIONS
# fw firewall
# net ipv4
# loc ipv4
# #Last Line - ADD ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"interfaces" tells the firewall which is internal and external interfaces:'''
vi /etc/shorewall/interfaces
# #ZONE INTERFACE BROADCAST OPTIONS
# #Note assuming "eth1"- is internal ip & "eth0"- is external ip
# net eth0 detect dhcp,tcpflags
# loc eth1 detect dhcp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"masq" tells the firewall that internal network(eth1)is connected through external network(eth0):'''
vi /etc/shorewall/masq
# #INTERFACE SUBNET ADDRESS PROTO PORT(S) IPSEC
# eth0 eth1
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"policy" tells the firewall that how should handle the requests:'''
vi /etc/shorewall/policy
# loc all ACCEPT
# net all DROP
# fw all ACCEPT
# all all REJECT

'''"shorewall.conf" we will configure ip_forwarding:'''
vi /etc/shorewall/shorewall.conf
# IP_FORWARDING=On

'''"rules" allows to set firewall rules:'''
vi /etc/shorewall/rules
# SECTION NEW
# ACCEPT net fw tcp 80
# REDIRECT loc 8081 tcp www
# ACCEPT loc fw tcp 22
# ACCEPT net fw icmp
# ACCEPT loc loc icmp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

''' # check shorewall working or not properly:'''
shorewall check

==Restart Applications==
/etc/init.d/dnsmasq restart
/etc/init.d/tinyproxy restart
/etc/init.d/shorewall restart
/etc/init.d/dansguardian restart

==DHCP Server==
Note: you need not to make any changes if you are working on single system or dhcp is already running on your local network interface(any changes dhcpd.conf or interfaces respective files)

vi /etc/default/dhcp3-server

# INTERFACE="eth1"

vi /etc/dhcp3/dhcpd.conf
# #change the subnet, netmask, range, dns, router as per your settings
# default-leasetime=86400
# max-leasetime=60480
# subnet 192.168.0.0 netmask 255.255.255.0{
# range 192.168.0.2 192.168.1.99;
# option domain-name-server 192.168.80.1;
# option routers 192.168.80.2;
#}

set static ip address:
vi /etc/network/interfaces
# auto lo
# iface lo inet loopback
# auto eth1
# iface eth0 inet static
# address 192.168.80.1
# netmask 255.255.255.0

#restart dhcp
# /etc/init.d/dhcpd restart

==Troubleshooting==
# Still not working restart the system once
# Check all service started are not "ps -ef | grep <service>" service - apache2, dnsmasq, tinyproxy, shorewall, dansguardian, and dhcpd. If any of the service is not starting, start the service sh /etc/init.d.<service> start. Check especially dnsmasq and shorewall services.

==Adding BlackList==

A BlackList is a precompiled list of sites that are deemed potentially worrisome.
cd /etc/dansguardian
wget http://urlblacklist.com/downloads/OriginalUpdateBL
vi OriginalUpdateBL
#modify line 68 by switching the listed URL with the following:
#http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist

chmod 777 /etc/dansguardian/OriginalUpdateBL
/etc/dansguardian/OriginalUpdateBL

when script is finished if you see any errors.
/etc/init.d/dansguardian restart

if the above script is not creating blacklists directory and creating blacklists file then follow the following:
cd /etc/dansguardian
wget http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist
tar -xvf bigblacklist.tar.gz
chown -R root:root blacklists
chmod -R 755 blacklists

Installing Dansguardian on LinuxMCE

2009-09-01T00:58:57Z

Anupindi007: /* Shorewall */

{| align="right"
| __TOC__
|}
===Draft page===
Still under draft and yet to finalize...
Thanks

==Basics==
DansGuardian is an award winning Open Source web content filter which currently runs on Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris. It filters the actual content of pages based on many methods including phrase matching, PICS filtering and URL filtering. It does not purely filter based on a banned list of sites like lesser totally commercial filters.

DansGuardian is designed to be completely flexible and allows you to tailor the filtering to your exact needs. It can be as draconian or as unobstructive as you want. The default settings are geared towards what a primary school might want but DansGuardian puts you in control of what you want to block.

DansGuardian is a true web content filter. We will see how to configure DansGuardian on Ubuntu Linux along with LinuxMCE.

==Installing packages==
===tinyproxy===
apt-get install tinyproxy

===shorewall===
apt-get install shorewall

===dansguardian===
apt-get install dansguardian

==dhcp==
apt-get install dhcp3-server

==dns server==
apt-get install dnsmasq

Optional:

==Dansguardian Web Log Viewer==
apt-get install dglog

==Configure Packages==
===Tinyproxy===
vi /etc/tinyproxy/tinyproxy.conf
Make the following changes
# User root
# Group root
# Allow 192.168.80.0/25

===Dansguardian===
vi /etc/dansguardian/dansguardian.conf
Make the following changes:
# Delete UNCONFIGURED line
# filterport = 8081
# proxyip = 192.168.80.1
# proxyport = 8888
# usernameidmethodproxyauth = off

===Shorewall===
Make the following changes:

'''set "shorewall" auto start at boot time:'''
vi /etc/default/shorewall
# startup = 1

'''"zones" tells the firewall to zone each name for the rest configuration file e.g. loc, net:'''
vi /etc/shorewall/zones
# #ZONES TYPE OPTION IN OUT
# #OPTIONS OPTIONS
# fw firewall
# net ipv4
# loc ipv4
# #Last Line - ADD ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"interfaces" tells the firewall which is internal and external interfaces:'''
vi /etc/shorewall/interfaces
# #ZONE INTERFACE BROADCAST OPTIONS
# #Note assuming "eth1"- is internal ip & "eth0"- is external ip
# net eth0 detect dhcp,tcpflags
# loc eth1 detect dhcp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"masq" tells the firewall that internal network(eth1)is connected through external network(eth0):'''
vi /etc/shorewall/masq
# #INTERFACE SUBNET ADDRESS PROTO PORT(S) IPSEC
# eth0 eth1
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"policy" tells the firewall that how should handle the requests:'''
vi /etc/shorewall/policy
# loc all ACCEPT
# net all DROP
# fw all ACCEPT
# all all REJECT

'''"shorewall.conf" we will configure ip_forwarding:'''
vi /etc/shorewall/shorewall.conf
# IP_FORWARDING=On

'''"rules" allows to set firewall rules:'''
vi /etc/shorewall/rules
# SECTION NEW
# ACCEPT net fw tcp 80
# REDIRECT loc 8081 tcp www
# ACCEPT loc fw tcp 22
# ACCEPT net fw icmp
# ACCEPT loc loc icmp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

''' # check shorewall working or not properly:'''
shorewall check

==Restart Applications==
/etc/init.d/dnsmasq restart
/etc/init.d/tinyproxy restart
/etc/init.d/shorewall restart
/etc/init.d/dansguardian restart

==DHCP Server==
Note: you need not to make any changes if you are working on single system or dhcp is already running on your local network interface(any changes dhcpd.conf or interfaces respective files)

vi /etc/default/dhcp3-server

# INTERFACE="eth1"

vi /etc/dhcp3/dhcpd.conf
# #change the subnet, netmask, range, dns, router as per your settings
# default-leasetime=86400
# max-leasetime=60480
# subnet 192.168.0.0 netmask 255.255.255.0{
# range 192.168.0.2 192.168.1.99;
# option domain-name-server 192.168.80.1;
# option routers 192.168.80.2;
#}

set static ip address:
vi /etc/network/interfaces
# auto lo
# iface lo inet loopback
# auto eth1
# iface eth0 inet static
# address 192.168.80.1
# netmask 255.255.255.0

#restart dhcp
# /etc/init.d/dhcpd restart

==Troubleshooting==
# Still not working restart the system once
# Check all service started are not "ps -ef | grep <service>" service - apache2, dnsmasq, tinyproxy, shorewall, dansguardian, and dhcpd. If any of the service is not starting, start the service sh /etc/init.d.<service> start. Check especially dnsmasq and shorewall services.

==Adding BlackList==

A BlackList is a precompiled list of sites that are deemed potentially worrisome.
cd /etc/dansguardian
wget http://urlblacklist.com/downloads/OriginalUpdateBL
vi OriginalUpdateBL
#modify line 68 by switching the listed URL with the following:
#http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist

chmod 777 /etc/dansguardian/OriginalUpdateBL
/etc/dansguardian/OriginalUpdateBL

when script is finished if you see any errors.
/etc/init.d/dansguardian restart

if the above script is not creating blacklists directory and creating blacklists file then follow the following:
cd /etc/dansguardian
wget http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist
tar -xvf bigblacklist.tar.gz
chown -R root:root blacklists
chmod -R 755 blacklists

Installing Dansguardian on LinuxMCE

2009-09-01T00:58:26Z

Anupindi007: /* Shorewall */

{| align="right"
| __TOC__
|}
===Draft page===
Still under draft and yet to finalize...
Thanks

==Basics==
DansGuardian is an award winning Open Source web content filter which currently runs on Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris. It filters the actual content of pages based on many methods including phrase matching, PICS filtering and URL filtering. It does not purely filter based on a banned list of sites like lesser totally commercial filters.

DansGuardian is designed to be completely flexible and allows you to tailor the filtering to your exact needs. It can be as draconian or as unobstructive as you want. The default settings are geared towards what a primary school might want but DansGuardian puts you in control of what you want to block.

DansGuardian is a true web content filter. We will see how to configure DansGuardian on Ubuntu Linux along with LinuxMCE.

==Installing packages==
===tinyproxy===
apt-get install tinyproxy

===shorewall===
apt-get install shorewall

===dansguardian===
apt-get install dansguardian

==dhcp==
apt-get install dhcp3-server

==dns server==
apt-get install dnsmasq

Optional:

==Dansguardian Web Log Viewer==
apt-get install dglog

==Configure Packages==
===Tinyproxy===
vi /etc/tinyproxy/tinyproxy.conf
Make the following changes
# User root
# Group root
# Allow 192.168.80.0/25

===Dansguardian===
vi /etc/dansguardian/dansguardian.conf
Make the following changes:
# Delete UNCONFIGURED line
# filterport = 8081
# proxyip = 192.168.80.1
# proxyport = 8888
# usernameidmethodproxyauth = off

===Shorewall===
Make the following changes:

'''set "shorewall" auto start at boot time:'''
vi /etc/default/shorewall
# startup = 1

'''"zones" tells the firewall to zone each name for the rest configuration file e.g. loc, net:'''
vi /etc/shorewall/zones
# #ZONES TYPE OPTION IN OUT
# #OPTIONS OPTIONS
# fw firewall
# net ipv4
# loc ipv4
# #Last Line - ADD ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"interfaces" tells the firewall which is internal and external interfaces:'''
vi /etc/shorewall/interfaces
# #ZONE INTERFACE BROADCAST OPTIONS
# #Note assuming "eth1"- is internal ip & "eth0"- is external ip
# net eth0 detect dhcp,tcpflags
# loc eth1 detect dhcp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"masq" tells the firewall that internal network(eth1)is connected through external network(eth0):'''
vi /etc/shorewall/masq
# #INTERFACE SUBNET ADDRESS PROTO PORT(S) IPSEC
# eth0 eth1
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"policy" tells the firewall that how should handle the requests:'''
vi /etc/shorewall/policy
# loc all ACCEPT
# net all DROP
# fw all ACCEPT
# all all REJECT

'''"shorewall.conf" we will configure ip_forwarding:'''
vi /etc/shorewall/shorewall.conf
# IP_FORWARDING=On

'''"rules" allows to set firewall rules:'''
vi /etc/shorewall/rules
# SECTION NEW
# ACCEPT net fw tcp 80
# REDIRECT loc 8081 tcp www
# ACCEPT loc fw tcp 22
# ACCEPT net fw icmp
# ACCEPT loc loc icmp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

''' # check shorewall working or not properly'''
shorewall check

==Restart Applications==
/etc/init.d/dnsmasq restart
/etc/init.d/tinyproxy restart
/etc/init.d/shorewall restart
/etc/init.d/dansguardian restart

==DHCP Server==
Note: you need not to make any changes if you are working on single system or dhcp is already running on your local network interface(any changes dhcpd.conf or interfaces respective files)

vi /etc/default/dhcp3-server

# INTERFACE="eth1"

vi /etc/dhcp3/dhcpd.conf
# #change the subnet, netmask, range, dns, router as per your settings
# default-leasetime=86400
# max-leasetime=60480
# subnet 192.168.0.0 netmask 255.255.255.0{
# range 192.168.0.2 192.168.1.99;
# option domain-name-server 192.168.80.1;
# option routers 192.168.80.2;
#}

set static ip address:
vi /etc/network/interfaces
# auto lo
# iface lo inet loopback
# auto eth1
# iface eth0 inet static
# address 192.168.80.1
# netmask 255.255.255.0

#restart dhcp
# /etc/init.d/dhcpd restart

==Troubleshooting==
# Still not working restart the system once
# Check all service started are not "ps -ef | grep <service>" service - apache2, dnsmasq, tinyproxy, shorewall, dansguardian, and dhcpd. If any of the service is not starting, start the service sh /etc/init.d.<service> start. Check especially dnsmasq and shorewall services.

==Adding BlackList==

A BlackList is a precompiled list of sites that are deemed potentially worrisome.
cd /etc/dansguardian
wget http://urlblacklist.com/downloads/OriginalUpdateBL
vi OriginalUpdateBL
#modify line 68 by switching the listed URL with the following:
#http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist

chmod 777 /etc/dansguardian/OriginalUpdateBL
/etc/dansguardian/OriginalUpdateBL

when script is finished if you see any errors.
/etc/init.d/dansguardian restart

if the above script is not creating blacklists directory and creating blacklists file then follow the following:
cd /etc/dansguardian
wget http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist
tar -xvf bigblacklist.tar.gz
chown -R root:root blacklists
chmod -R 755 blacklists

Installing Dansguardian on LinuxMCE

2009-09-01T00:57:19Z

Anupindi007: /* Shorewall */

{| align="right"
| __TOC__
|}
===Draft page===
Still under draft and yet to finalize...
Thanks

==Basics==
DansGuardian is an award winning Open Source web content filter which currently runs on Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris. It filters the actual content of pages based on many methods including phrase matching, PICS filtering and URL filtering. It does not purely filter based on a banned list of sites like lesser totally commercial filters.

DansGuardian is designed to be completely flexible and allows you to tailor the filtering to your exact needs. It can be as draconian or as unobstructive as you want. The default settings are geared towards what a primary school might want but DansGuardian puts you in control of what you want to block.

DansGuardian is a true web content filter. We will see how to configure DansGuardian on Ubuntu Linux along with LinuxMCE.

==Installing packages==
===tinyproxy===
apt-get install tinyproxy

===shorewall===
apt-get install shorewall

===dansguardian===
apt-get install dansguardian

==dhcp==
apt-get install dhcp3-server

==dns server==
apt-get install dnsmasq

Optional:

==Dansguardian Web Log Viewer==
apt-get install dglog

==Configure Packages==
===Tinyproxy===
vi /etc/tinyproxy/tinyproxy.conf
Make the following changes
# User root
# Group root
# Allow 192.168.80.0/25

===Dansguardian===
vi /etc/dansguardian/dansguardian.conf
Make the following changes:
# Delete UNCONFIGURED line
# filterport = 8081
# proxyip = 192.168.80.1
# proxyport = 8888
# usernameidmethodproxyauth = off

===Shorewall===
Make the following changes:

'''set "shorewall" auto start at boot time:'''
vi /etc/default/shorewall
# startup = 1

'''"zones" tells the firewall to zone each name for the rest configuration file e.g. loc, net:'''
vi /etc/shorewall/zones
# #ZONES TYPE OPTION IN OUT
# #OPTIONS OPTIONS
# fw firewall
# net ipv4
# loc ipv4
# #Last Line - ADD ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"interfaces" tells the firewall which is internal and external interfaces:'''
vi /etc/shorewall/interfaces
# #ZONE INTERFACE BROADCAST OPTIONS
# #Note assuming "eth1"- is internal ip & "eth0"- is external ip
# net eth0 detect dhcp,tcpflags
# loc eth1 detect dhcp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"masq" tells the firewall that internal network(eth1)is connected through external network(eth0):'''
vi /etc/shorewall/masq
# #INTERFACE SUBNET ADDRESS PROTO PORT(S) IPSEC
# eth0 eth1
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"policy" tells the firewall that how should handle the requests:''''''Bold text'''
vi /etc/shorewall/policy
# loc all ACCEPT
# net all DROP
# fw all ACCEPT
# all all REJECT

'''"shorewall.conf" we will configure ip_forwarding:'''
vi /etc/shorewall/shorewall.conf
# IP_FORWARDING=On

'''"rules" allows to set firewall rules:'''
vi /etc/shorewall/rules
# SECTION NEW
# ACCEPT net fw tcp 80
# REDIRECT loc 8081 tcp www
# ACCEPT loc fw tcp 22
# ACCEPT net fw icmp
# ACCEPT loc loc icmp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

''' # check shorewall working or not properly'''
shorewall check

==Restart Applications==
/etc/init.d/dnsmasq restart
/etc/init.d/tinyproxy restart
/etc/init.d/shorewall restart
/etc/init.d/dansguardian restart

==DHCP Server==
Note: you need not to make any changes if you are working on single system or dhcp is already running on your local network interface(any changes dhcpd.conf or interfaces respective files)

vi /etc/default/dhcp3-server

# INTERFACE="eth1"

vi /etc/dhcp3/dhcpd.conf
# #change the subnet, netmask, range, dns, router as per your settings
# default-leasetime=86400
# max-leasetime=60480
# subnet 192.168.0.0 netmask 255.255.255.0{
# range 192.168.0.2 192.168.1.99;
# option domain-name-server 192.168.80.1;
# option routers 192.168.80.2;
#}

set static ip address:
vi /etc/network/interfaces
# auto lo
# iface lo inet loopback
# auto eth1
# iface eth0 inet static
# address 192.168.80.1
# netmask 255.255.255.0

#restart dhcp
# /etc/init.d/dhcpd restart

==Troubleshooting==
# Still not working restart the system once
# Check all service started are not "ps -ef | grep <service>" service - apache2, dnsmasq, tinyproxy, shorewall, dansguardian, and dhcpd. If any of the service is not starting, start the service sh /etc/init.d.<service> start. Check especially dnsmasq and shorewall services.

==Adding BlackList==

A BlackList is a precompiled list of sites that are deemed potentially worrisome.
cd /etc/dansguardian
wget http://urlblacklist.com/downloads/OriginalUpdateBL
vi OriginalUpdateBL
#modify line 68 by switching the listed URL with the following:
#http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist

chmod 777 /etc/dansguardian/OriginalUpdateBL
/etc/dansguardian/OriginalUpdateBL

when script is finished if you see any errors.
/etc/init.d/dansguardian restart

if the above script is not creating blacklists directory and creating blacklists file then follow the following:
cd /etc/dansguardian
wget http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist
tar -xvf bigblacklist.tar.gz
chown -R root:root blacklists
chmod -R 755 blacklists

Installing Dansguardian on LinuxMCE

2009-09-01T00:56:19Z

Anupindi007: /* Shorewall */

{| align="right"
| __TOC__
|}
===Draft page===
Still under draft and yet to finalize...
Thanks

==Basics==
DansGuardian is an award winning Open Source web content filter which currently runs on Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris. It filters the actual content of pages based on many methods including phrase matching, PICS filtering and URL filtering. It does not purely filter based on a banned list of sites like lesser totally commercial filters.

DansGuardian is designed to be completely flexible and allows you to tailor the filtering to your exact needs. It can be as draconian or as unobstructive as you want. The default settings are geared towards what a primary school might want but DansGuardian puts you in control of what you want to block.

DansGuardian is a true web content filter. We will see how to configure DansGuardian on Ubuntu Linux along with LinuxMCE.

==Installing packages==
===tinyproxy===
apt-get install tinyproxy

===shorewall===
apt-get install shorewall

===dansguardian===
apt-get install dansguardian

==dhcp==
apt-get install dhcp3-server

==dns server==
apt-get install dnsmasq

Optional:

==Dansguardian Web Log Viewer==
apt-get install dglog

==Configure Packages==
===Tinyproxy===
vi /etc/tinyproxy/tinyproxy.conf
Make the following changes
# User root
# Group root
# Allow 192.168.80.0/25

===Dansguardian===
vi /etc/dansguardian/dansguardian.conf
Make the following changes:
# Delete UNCONFIGURED line
# filterport = 8081
# proxyip = 192.168.80.1
# proxyport = 8888
# usernameidmethodproxyauth = off

===Shorewall===
Make the following changes:

'''set "shorewall" auto start at boot time:'''
vi /etc/default/shorewall
# startup = 1

'''"zones" tells the firewall to zone each name for the rest configuration file e.g. loc, net:'''
vi /etc/shorewall/zones
# #ZONES TYPE OPTION IN OUT
# #OPTIONS OPTIONS
# fw firewall
# net ipv4
# loc ipv4
# #Last Line - ADD ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"interfaces" tells the firewall which is internal and external interfaces:'''
vi /etc/shorewall/interfaces
# #ZONE INTERFACE BROADCAST OPTIONS
# #Note assuming "eth1"- is internal ip & "eth0"- is external ip
# net eth0 detect dhcp,tcpflags
# loc eth1 detect dhcp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"masq" tells the firewall that internal network(eth1)is connected through external network(eth0):'''
vi /etc/shorewall/masq
# #INTERFACE SUBNET ADDRESS PROTO PORT(S) IPSEC
# eth0 eth1
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"policy" tells the firewall that how should handle the requests:''''''Bold text'''
vi /etc/shorewall/policy
# loc all ACCEPT
# net all DROP
# fw all ACCEPT
# all all REJECT

'''"shorewall.conf" we will configure ip_forwarding:'''
vi /etc/shorewall/shorewall.conf
# IP_FORWARDING=On

'''"rules" allows to set firewall rules:'''
vi /etc/shorewall/rules
# SECTION NEW
# ACCEPT net fw tcp 80
# REDIRECT loc 8081 tcp www
# ACCEPT loc fw tcp 22
# ACCEPT net fw icmp
# ACCEPT loc loc icmp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

''' # check shorewall working or not properly'''
shorewall check

==Restart Applications==
/etc/init.d/dnsmasq restart
/etc/init.d/tinyproxy restart
/etc/init.d/shorewall restart
/etc/init.d/dansguardian restart

==DHCP Server==
Note: you need not to make any changes if you are working on single system or dhcp is already running on your local network interface(any changes dhcpd.conf or interfaces respective files)

vi /etc/default/dhcp3-server

# INTERFACE="eth1"

vi /etc/dhcp3/dhcpd.conf
# #change the subnet, netmask, range, dns, router as per your settings
# default-leasetime=86400
# max-leasetime=60480
# subnet 192.168.0.0 netmask 255.255.255.0{
# range 192.168.0.2 192.168.1.99;
# option domain-name-server 192.168.80.1;
# option routers 192.168.80.2;
#}

set static ip address:
vi /etc/network/interfaces
# auto lo
# iface lo inet loopback
# auto eth1
# iface eth0 inet static
# address 192.168.80.1
# netmask 255.255.255.0

#restart dhcp
# /etc/init.d/dhcpd restart

==Troubleshooting==
# Still not working restart the system once
# Check all service started are not "ps -ef | grep <service>" service - apache2, dnsmasq, tinyproxy, shorewall, dansguardian, and dhcpd. If any of the service is not starting, start the service sh /etc/init.d.<service> start. Check especially dnsmasq and shorewall services.

==Adding BlackList==

A BlackList is a precompiled list of sites that are deemed potentially worrisome.
cd /etc/dansguardian
wget http://urlblacklist.com/downloads/OriginalUpdateBL
vi OriginalUpdateBL
#modify line 68 by switching the listed URL with the following:
#http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist

chmod 777 /etc/dansguardian/OriginalUpdateBL
/etc/dansguardian/OriginalUpdateBL

when script is finished if you see any errors.
/etc/init.d/dansguardian restart

if the above script is not creating blacklists directory and creating blacklists file then follow the following:
cd /etc/dansguardian
wget http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist
tar -xvf bigblacklist.tar.gz
chown -R root:root blacklists
chmod -R 755 blacklists

Installing Dansguardian on LinuxMCE

2009-09-01T00:55:57Z

Anupindi007: /* Shorewall */

{| align="right"
| __TOC__
|}
===Draft page===
Still under draft and yet to finalize...
Thanks

==Basics==
DansGuardian is an award winning Open Source web content filter which currently runs on Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris. It filters the actual content of pages based on many methods including phrase matching, PICS filtering and URL filtering. It does not purely filter based on a banned list of sites like lesser totally commercial filters.

DansGuardian is designed to be completely flexible and allows you to tailor the filtering to your exact needs. It can be as draconian or as unobstructive as you want. The default settings are geared towards what a primary school might want but DansGuardian puts you in control of what you want to block.

DansGuardian is a true web content filter. We will see how to configure DansGuardian on Ubuntu Linux along with LinuxMCE.

==Installing packages==
===tinyproxy===
apt-get install tinyproxy

===shorewall===
apt-get install shorewall

===dansguardian===
apt-get install dansguardian

==dhcp==
apt-get install dhcp3-server

==dns server==
apt-get install dnsmasq

Optional:

==Dansguardian Web Log Viewer==
apt-get install dglog

==Configure Packages==
===Tinyproxy===
vi /etc/tinyproxy/tinyproxy.conf
Make the following changes
# User root
# Group root
# Allow 192.168.80.0/25

===Dansguardian===
vi /etc/dansguardian/dansguardian.conf
Make the following changes:
# Delete UNCONFIGURED line
# filterport = 8081
# proxyip = 192.168.80.1
# proxyport = 8888
# usernameidmethodproxyauth = off

===Shorewall===
Make the following changes:
'''set "shorewall" auto start at boot time:'''
vi /etc/default/shorewall
# startup = 1

'''"zones" tells the firewall to zone each name for the rest configuration file e.g. loc, net:'''
vi /etc/shorewall/zones
# #ZONES TYPE OPTION IN OUT
# #OPTIONS OPTIONS
# fw firewall
# net ipv4
# loc ipv4
# #Last Line - ADD ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"interfaces" tells the firewall which is internal and external interfaces:'''
vi /etc/shorewall/interfaces
# #ZONE INTERFACE BROADCAST OPTIONS
# #Note assuming "eth1"- is internal ip & "eth0"- is external ip
# net eth0 detect dhcp,tcpflags
# loc eth1 detect dhcp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"masq" tells the firewall that internal network(eth1)is connected through external network(eth0):'''
vi /etc/shorewall/masq
# #INTERFACE SUBNET ADDRESS PROTO PORT(S) IPSEC
# eth0 eth1
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

'''"policy" tells the firewall that how should handle the requests:''''''Bold text'''
vi /etc/shorewall/policy
# loc all ACCEPT
# net all DROP
# fw all ACCEPT
# all all REJECT

'''"shorewall.conf" we will configure ip_forwarding:'''
vi /etc/shorewall/shorewall.conf
# IP_FORWARDING=On

'''"rules" allows to set firewall rules:'''
vi /etc/shorewall/rules
# SECTION NEW
# ACCEPT net fw tcp 80
# REDIRECT loc 8081 tcp www
# ACCEPT loc fw tcp 22
# ACCEPT net fw icmp
# ACCEPT loc loc icmp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

''' # check shorewall working or not properly'''
shorewall check

==Restart Applications==
/etc/init.d/dnsmasq restart
/etc/init.d/tinyproxy restart
/etc/init.d/shorewall restart
/etc/init.d/dansguardian restart

==DHCP Server==
Note: you need not to make any changes if you are working on single system or dhcp is already running on your local network interface(any changes dhcpd.conf or interfaces respective files)

vi /etc/default/dhcp3-server

# INTERFACE="eth1"

vi /etc/dhcp3/dhcpd.conf
# #change the subnet, netmask, range, dns, router as per your settings
# default-leasetime=86400
# max-leasetime=60480
# subnet 192.168.0.0 netmask 255.255.255.0{
# range 192.168.0.2 192.168.1.99;
# option domain-name-server 192.168.80.1;
# option routers 192.168.80.2;
#}

set static ip address:
vi /etc/network/interfaces
# auto lo
# iface lo inet loopback
# auto eth1
# iface eth0 inet static
# address 192.168.80.1
# netmask 255.255.255.0

#restart dhcp
# /etc/init.d/dhcpd restart

==Troubleshooting==
# Still not working restart the system once
# Check all service started are not "ps -ef | grep <service>" service - apache2, dnsmasq, tinyproxy, shorewall, dansguardian, and dhcpd. If any of the service is not starting, start the service sh /etc/init.d.<service> start. Check especially dnsmasq and shorewall services.

==Adding BlackList==

A BlackList is a precompiled list of sites that are deemed potentially worrisome.
cd /etc/dansguardian
wget http://urlblacklist.com/downloads/OriginalUpdateBL
vi OriginalUpdateBL
#modify line 68 by switching the listed URL with the following:
#http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist

chmod 777 /etc/dansguardian/OriginalUpdateBL
/etc/dansguardian/OriginalUpdateBL

when script is finished if you see any errors.
/etc/init.d/dansguardian restart

if the above script is not creating blacklists directory and creating blacklists file then follow the following:
cd /etc/dansguardian
wget http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist
tar -xvf bigblacklist.tar.gz
chown -R root:root blacklists
chmod -R 755 blacklists

Installing Dansguardian on LinuxMCE

2009-09-01T00:51:46Z

Anupindi007:

{| align="right"
| __TOC__
|}
===Draft page===
Still under draft and yet to finalize...
Thanks

==Basics==
DansGuardian is an award winning Open Source web content filter which currently runs on Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris. It filters the actual content of pages based on many methods including phrase matching, PICS filtering and URL filtering. It does not purely filter based on a banned list of sites like lesser totally commercial filters.

DansGuardian is designed to be completely flexible and allows you to tailor the filtering to your exact needs. It can be as draconian or as unobstructive as you want. The default settings are geared towards what a primary school might want but DansGuardian puts you in control of what you want to block.

DansGuardian is a true web content filter. We will see how to configure DansGuardian on Ubuntu Linux along with LinuxMCE.

==Installing packages==
===tinyproxy===
apt-get install tinyproxy

===shorewall===
apt-get install shorewall

===dansguardian===
apt-get install dansguardian

==dhcp==
apt-get install dhcp3-server

==dns server==
apt-get install dnsmasq

Optional:

==Dansguardian Web Log Viewer==
apt-get install dglog

==Configure Packages==
===Tinyproxy===
vi /etc/tinyproxy/tinyproxy.conf
Make the following changes
# User root
# Group root
# Allow 192.168.80.0/25

===Dansguardian===
vi /etc/dansguardian/dansguardian.conf
Make the following changes:
# Delete UNCONFIGURED line
# filterport = 8081
# proxyip = 192.168.80.1
# proxyport = 8888
# usernameidmethodproxyauth = off

===Shorewall===
Make the following changes:
set "shorewall" auto start at boot time:
vi /etc/default/shorewall
# startup = 1

"zones" tells the firewall to zone each name for the rest configuration file e.g. loc, net:
vi /etc/shorewall/zones
# #ZONES TYPE OPTION IN OUT
# #OPTIONS OPTIONS
# fw firewall
# net ipv4
# loc ipv4
# #Last Line - ADD ENTRIES ABOVE THIS ONE - DO NOT REMOVE

"interfaces" tells the firewall which is internal and external interfaces:
vi /etc/shorewall/interfaces
# #ZONE INTERFACE BROADCAST OPTIONS
# #Note assuming "eth1"- is internal ip & "eth0"- is external ip
# net eth0 detect dhcp,tcpflags
# loc eth1 detect dhcp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

"masq" tells the firewall that internal network(eth1)is connected through external network(eth0):
vi /etc/shorewall/masq
# #INTERFACE SUBNET ADDRESS PROTO PORT(S) IPSEC
# eth0 eth1
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

"policy" tells the firewall that how should handle the requests:
vi /etc/shorewall/policy
# loc all ACCEPT
# net all DROP
# fw all ACCEPT
# all all REJECT

"shorewall.conf" we will configure ip_forwarding:
vi /etc/shorewall/shorewall.conf
# IP_FORWARDING=On

"rules" allows to set firewall rules:
vi /etc/shorewall/rules
# SECTION NEW
# ACCEPT net fw tcp 80
# REDIRECT loc 8081 tcp www
# ACCEPT loc fw tcp 22
# ACCEPT net fw icmp
# ACCEPT loc loc icmp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

# check shorewall working or not properly
shorewall check

==Restart Applications==
/etc/init.d/dnsmasq restart
/etc/init.d/tinyproxy restart
/etc/init.d/shorewall restart
/etc/init.d/dansguardian restart

==DHCP Server==
Note: you need not to make any changes if you are working on single system or dhcp is already running on your local network interface(any changes dhcpd.conf or interfaces respective files)

vi /etc/default/dhcp3-server

# INTERFACE="eth1"

vi /etc/dhcp3/dhcpd.conf
# #change the subnet, netmask, range, dns, router as per your settings
# default-leasetime=86400
# max-leasetime=60480
# subnet 192.168.0.0 netmask 255.255.255.0{
# range 192.168.0.2 192.168.1.99;
# option domain-name-server 192.168.80.1;
# option routers 192.168.80.2;
#}

set static ip address:
vi /etc/network/interfaces
# auto lo
# iface lo inet loopback
# auto eth1
# iface eth0 inet static
# address 192.168.80.1
# netmask 255.255.255.0

#restart dhcp
# /etc/init.d/dhcpd restart

==Troubleshooting==
# Still not working restart the system once
# Check all service started are not "ps -ef | grep <service>" service - apache2, dnsmasq, tinyproxy, shorewall, dansguardian, and dhcpd. If any of the service is not starting, start the service sh /etc/init.d.<service> start. Check especially dnsmasq and shorewall services.

==Adding BlackList==

A BlackList is a precompiled list of sites that are deemed potentially worrisome.
cd /etc/dansguardian
wget http://urlblacklist.com/downloads/OriginalUpdateBL
vi OriginalUpdateBL
#modify line 68 by switching the listed URL with the following:
#http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist

chmod 777 /etc/dansguardian/OriginalUpdateBL
/etc/dansguardian/OriginalUpdateBL

when script is finished if you see any errors.
/etc/init.d/dansguardian restart

if the above script is not creating blacklists directory and creating blacklists file then follow the following:
cd /etc/dansguardian
wget http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist
tar -xvf bigblacklist.tar.gz
chown -R root:root blacklists
chmod -R 755 blacklists

Installing Dansguardian on LinuxMCE

2009-09-01T00:50:04Z

Anupindi007:

{| align="right"
| __TOC__
|}
===Draft page===
Still under draft and yet to finalize...
Thanks

==Basics==
DansGuardian is an award winning Open Source web content filter which currently runs on Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris. It filters the actual content of pages based on many methods including phrase matching, PICS filtering and URL filtering. It does not purely filter based on a banned list of sites like lesser totally commercial filters.

DansGuardian is designed to be completely flexible and allows you to tailor the filtering to your exact needs. It can be as draconian or as unobstructive as you want. The default settings are geared towards what a primary school might want but DansGuardian puts you in control of what you want to block.

DansGuardian is a true web content filter. We will see how to configure DansGuardian on Ubuntu Linux along with LinuxMCE.

==Installing packages==
===tinyproxy===
apt-get install tinyproxy

===shorewall===
apt-get install shorewall

===dansguardian===
apt-get install dansguardian

==dhcp==
apt-get install dhcp3-server

==dns server==
apt-get install dnsmasq

Optional:

==Dansguardian Web Log Viewer==
apt-get install dglog

==Configure Packages==
===Tinyproxy===
vi /etc/tinyproxy/tinyproxy.conf
Make the following changes
# User root
# Group root
# Allow 192.168.80.0/25

===Dansguardian===
vi /etc/dansguardian/dansguardian.conf
Make the following changes:
# Delete UNCONFIGURED line
# filterport = 8081
# proxyip = 192.168.80.1
# proxyport = 8888
# usernameidmethodproxyauth = off

===Shorewall===
Make the following changes:

set "shorewall" auto start at boot time:
vi /etc/default/shorewall
# startup = 1

"zones" tells the firewall to zone each name for the rest configuration file e.g. loc, net:
vi /etc/shorewall/zones
# #ZONES TYPE OPTION IN OUT
# #OPTIONS OPTIONS
# fw firewall
# net ipv4
# loc ipv4
# #Last Line - ADD ENTRIES ABOVE THIS ONE - DO NOT REMOVE

"interfaces" tells the firewall which is internal and external interfaces:
vi /etc/shorewall/interfaces
# #ZONE INTERFACE BROADCAST OPTIONS
# #Note assuming "eth1"- is internal ip & "eth0"- is external ip
# net eth0 detect dhcp,tcpflags
# loc eth1 detect dhcp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

"masq" tells the firewall that internal network(eth1)is connected through external network(eth0):
vi /etc/shorewall/masq
# #INTERFACE SUBNET ADDRESS PROTO PORT(S) IPSEC
# eth0 eth1
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

"policy" tells the firewall that how should handle the requests:
vi /etc/shorewall/policy
# loc all ACCEPT
# net all DROP
# fw all ACCEPT
# all all REJECT

"shorewall.conf" we will configure ip_forwarding:
vi /etc/shorewall/shorewall.conf
# IP_FORWARDING=On

"rules" allows to set firewall rules:
vi /etc/shorewall/rules
# SECTION NEW
# ACCEPT net fw tcp 80
# REDIRECT loc 8081 tcp www
# ACCEPT loc fw tcp 22
# ACCEPT net fw icmp
# ACCEPT loc loc icmp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

# check shorewall working or not properly
shorewall check

==Restart Applications==
/etc/init.d/dnsmasq restart
/etc/init.d/tinyproxy restart
/etc/init.d/shorewall restart
/etc/init.d/dansguardian restart

==DHCP Server==
Note: you need not to make any changes if you are working on single system or dhcp is already running on your local network interface(any changes dhcpd.conf or interfaces respective files)

vi /etc/default/dhcp3-server

# INTERFACE="eth1"

vi /etc/dhcp3/dhcpd.conf
# #change the subnet, netmask, range, dns, router as per your settings
# default-leasetime=86400
# max-leasetime=60480
# subnet 192.168.0.0 netmask 255.255.255.0{
# range 192.168.0.2 192.168.1.99;
# option domain-name-server 192.168.80.1;
# option routers 192.168.80.2;
#}

set static ip address:
vi /etc/network/interfaces
# auto lo
# iface lo inet loopback
# auto eth1
# iface eth0 inet static
# address 192.168.80.1
# netmask 255.255.255.0

#restart dhcp
# /etc/init.d/dhcpd restart

==Troubleshooting==
# Still not working restart the system once
# Check all service started are not "ps -ef | grep <service>" service - apache2, dnsmasq, tinyproxy, shorewall, dansguardian, and dhcpd. If any of the service is not starting, start the service sh /etc/init.d.<service> start. Check especially dnsmasq and shorewall services.

==Adding BlackList==

A BlackList is a precompiled list of sites that are deemed potentially worrisome.
cd /etc/dansguardian
wget http://urlblacklist.com/downloads/OriginalUpdateBL
vi OriginalUpdateBL
#modify line 68 by switching the listed URL with the following:
#http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist

chmod 777 /etc/dansguardian/OriginalUpdateBL
/etc/dansguardian/OriginalUpdateBL

when script is finished if you see any errors.
/etc/init.d/dansguardian restart

if the above script is not creating blacklists directory and creating blacklists file then follow the following:
cd /etc/dansguardian
wget http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist
tar -xvf bigblacklist.tar.gz
chown -R root:root blacklists
chmod -R 755 blacklists

</gallery>
</gallery>

Installing Dansguardian on LinuxMCE

2009-09-01T00:48:29Z

Anupindi007: New page: {| align="right" | __TOC__ |} ===Draft page=== Still under draft and yet to finalize... Thanks ==Basics== DansGuardian is an award winning Open Source web content filter which current...

{| align="right"
| __TOC__
|}
===Draft page===
Still under draft and yet to finalize...
Thanks

==Basics==
DansGuardian is an award winning Open Source web content filter which currently runs on Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris. It filters the actual content of pages based on many methods including phrase matching, PICS filtering and URL filtering. It does not purely filter based on a banned list of sites like lesser totally commercial filters.

DansGuardian is designed to be completely flexible and allows you to tailor the filtering to your exact needs. It can be as draconian or as unobstructive as you want. The default settings are geared towards what a primary school might want but DansGuardian puts you in control of what you want to block.

DansGuardian is a true web content filter. We will see how to configure DansGuardian on Ubuntu Linux along with LinuxMCE.

==Installing packages==
===tinyproxy===
apt-get install tinyproxy

===shorewall===
apt-get install shorewall

===dansguardian===
apt-get install dansguardian

==dhcp==
apt-get install dhcp3-server

==dns server==
apt-get install dnsmasq

Optional:

==Dansguardian Web Log Viewer==
apt-get install dglog

==Configure Packages==
===Tinyproxy===
vi /etc/tinyproxy/tinyproxy.conf
Make the following changes
# User root
# Group root
# Allow 192.168.80.0/25

===Dansguardian===
vi /etc/dansguardian/dansguardian.conf
Make the following changes:
# Delete UNCONFIGURED line
# filterport = 8081
# proxyip = 192.168.80.1
# proxyport = 8888
# usernameidmethodproxyauth = off

===Shorewall===
Make the following changes:

set "shorewall" auto start at boot time:
vi /etc/default/shorewall
# startup = 1

"zones" tells the firewall to zone each name for the rest configuration file e.g. loc, net:
vi /etc/shorewall/zones
# #ZONES TYPE OPTION IN OUT
# #OPTIONS OPTIONS
# fw firewall
# net ipv4
# loc ipv4
# #Last Line - ADD ENTRIES ABOVE THIS ONE - DO NOT REMOVE

"interfaces" tells the firewall which is internal and external interfaces:
vi /etc/shorewall/interfaces
# #ZONE INTERFACE BROADCAST OPTIONS
# #Note assuming "eth1"- is internal ip & "eth0"- is external ip
# net eth0 detect dhcp,tcpflags
# loc eth1 detect dhcp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

"masq" tells the firewall that internal network(eth1)is connected through external network(eth0):
vi /etc/shorewall/masq
# #INTERFACE SUBNET ADDRESS PROTO PORT(S) IPSEC
# eth0 eth1
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

"policy" tells the firewall that how should handle the requests:
vi /etc/shorewall/policy
# loc all ACCEPT
# net all DROP
# fw all ACCEPT
# all all REJECT

"shorewall.conf" we will configure ip_forwarding:
vi /etc/shorewall/shorewall.conf
# IP_FORWARDING=On

"rules" allows to set firewall rules:
vi /etc/shorewall/rules
# SECTION NEW
# ACCEPT net fw tcp 80
# REDIRECT loc 8081 tcp www
# ACCEPT loc fw tcp 22
# ACCEPT net fw icmp
# ACCEPT loc loc icmp
# #LAST LINE --ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

# check shorewall working or not properly
shorewall check

==Restart Applications==
/etc/init.d/dnsmasq restart
/etc/init.d/tinyproxy restart
/etc/init.d/shorewall restart
/etc/init.d/dansguardian restart

==DHCP Server==
Note: you need not to make any changes if you are working on single system or dhcp is already running on your local network interface(any changes dhcpd.conf or interfaces respective files)

vi /etc/default/dhcp3-server

# INTERFACE="eth1"

vi /etc/dhcp3/dhcpd.conf
# #change the subnet, netmask, range, dns, router as per your settings
# default-leasetime=86400
# max-leasetime=60480
# subnet 192.168.0.0 netmask 255.255.255.0{
# range 192.168.0.2 192.168.1.99;
# option domain-name-server 192.168.80.1;
# option routers 192.168.80.2;
#}

set static ip address:
vi /etc/network/interfaces
# auto lo
# iface lo inet loopback
# auto eth1
# iface eth0 inet static
# address 192.168.80.1
# netmask 255.255.255.0

#restart dhcp
# /etc/init.d/dhcpd restart

==Troubleshooting==
# Still not working restart the system once
# Check all service started are not "ps -ef | grep <service>" service - apache2, dnsmasq, tinyproxy, shorewall, dansguardian, and dhcpd. If any of the service is not starting, start the service sh /etc/init.d.<service> start. Check especially dnsmasq and shorewall services.

==Adding BlackList==

A BlackList is a precompiled list of sites that are deemed potentially worrisome.
cd /etc/dansguardian
wget http://urlblacklist.com/downloads/OriginalUpdateBL
vi OriginalUpdateBL
#modify line 68 by switching the listed URL with the following:
#http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist

chmod 777 /etc/dansguardian/OriginalUpdateBL
/etc/dansguardian/OriginalUpdateBL

when script is finished if you see any errors.
/etc/init.d/dansguardian restart

if the above script is not creating blacklists directory and creating blacklists file then follow the following:
cd /etc/dansguardian
wget http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist
tar -xvf bigblacklist.tar.gz
chown -R root:root blacklists
chmod -R 755 blacklists

<gallery>
Image:dansgaurdian.jpg|Caption1
</gallery>
Image:Example.jpg|Caption2
</gallery>
</gallery>

Short Howto on Wiki

2009-09-01T00:45:46Z

Anupindi007: /* Creating a new page */

[[Category: Wiki administration]]
== Creating a new page ==
To create a new page you don't really need a wiki-link that points to it, you only need to write this in your location bar:
<nowiki>http://wiki.linuxmce.org/index.php/Installing_Dansguardian_on_LinuxMCE</nowiki>

This way we will not have links pointing to dead / unfinished pages.
http://wiki.linuxmce.org/index.php/Installing_Dansguardian_on_LinuxMCE

== Categories ==
Look on the [[Special:Categories|Categories]] page to see the categories the where allready entered and click on one of the categories to see the documents related to it. If you want to add your document in a existing category or wish to create a new one, add this wiki tag for each category at the end of your page:

<nowiki>[[ Category : First Category Name ]]</nowiki>
<nowiki>[[ Category : Second Category Name ]]</nowiki>

== Tree like structure using Categories ==
MediaWiki uses the concept of categories to help you separate information in logical related pages. Sometimes you want to create a tree-like structure to organize that information, this can be done by using the concept of subcategories. To make a category ''X'' to act as a subcategory of category ''Y'', just add the wiki tag: '''<nowiki>[[ Category : Y ]]</nowiki>''' in the ''X'' category description page, this way you will make ''Y'' category the parent of ''X'' category.

===For More Detailed Guide===
[http://en.wikipedia.org/wiki/Wikipedia:How_to_edit_a_page Detailed Wiki Editing Guide]