Difference between revisions of "Installing Dansguardian"
Rwilson131 (Talk | contribs) |
Rwilson131 (Talk | contribs) (change the port to require less modifications.) |
||
Line 16: | Line 16: | ||
Make the following changes: | Make the following changes: | ||
# Delete UNCONFIGURED line | # Delete UNCONFIGURED line | ||
− | # filterport = | + | # filterport = 8081 |
# proxyip = 192.168.80.1 | # proxyip = 192.168.80.1 | ||
# proxyport = 8888 | # proxyport = 8888 | ||
Line 26: | Line 26: | ||
# Group root | # Group root | ||
# Allow 192.168.80.0/25 | # Allow 192.168.80.0/25 | ||
− | + | ||
− | + | ||
− | + | ||
==Restart Applications== | ==Restart Applications== | ||
/etc/init.d/apache2 restart | /etc/init.d/apache2 restart | ||
/etc/init.d/tinyproxy restart | /etc/init.d/tinyproxy restart | ||
/etc/init.d/dansguardian restart | /etc/init.d/dansguardian restart | ||
− | ==Configuring Firewall to forward to port | + | ==Configuring Firewall to forward to port 8081== |
You will need to go to [[LinuxMCE Admin Website]] Advanced > Network > Firewall Rules and add a new rule. | You will need to go to [[LinuxMCE Admin Website]] Advanced > Network > Firewall Rules and add a new rule. | ||
Enter the following into the text boxes. | Enter the following into the text boxes. | ||
− | tcp 80 to 0 | + | tcp 80 to 0 8081 192.168.80.1 port_forward |
==Troubleshooting== | ==Troubleshooting== | ||
Revision as of 00:41, 4 October 2007
Contents
Basics
DansGuardian is an award winning Open Source web content filter which currently runs on Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris. It filters the actual content of pages based on many methods including phrase matching, PICS filtering and URL filtering. It does not purely filter based on a banned list of sites like lesser totally commercial filters.
DansGuardian is designed to be completely flexible and allows you to tailor the filtering to your exact needs. It can be as draconian or as unobstructive as you want. The default settings are geared towards what a primary school might want but DansGuardian puts you in control of what you want to block.
DansGuardian is a true web content filter.
Installing packages
tinyproxy
apt-get install tinyproxy
dansguardian
apt-get install dansguardian
Configure Packages
Dansguardian
vi /etc/dansguardian/dansguardian.conf
Make the following changes:
- Delete UNCONFIGURED line
- filterport = 8081
- proxyip = 192.168.80.1
- proxyport = 8888
- usernameidmethodproxyauth = off
Tinyproxy
vi /etc/tinyproxy/tinyproxy.conf
Make the following changes
- User root
- Group root
- Allow 192.168.80.0/25
Restart Applications
/etc/init.d/apache2 restart /etc/init.d/tinyproxy restart /etc/init.d/dansguardian restart
Configuring Firewall to forward to port 8081
You will need to go to LinuxMCE Admin Website Advanced > Network > Firewall Rules and add a new rule. Enter the following into the text boxes.
tcp 80 to 0 8081 192.168.80.1 port_forward
Troubleshooting
Adding BlackList
A BlackList is a precompiled list of sites that are deemed potentially worrisome. This list can be obtained for http://www.URLBlacklist.com Here is a step by step guide to adding the biglist to your dansguardian filtering directories
cd /etc/dansguardian wget http://urlblacklist.com/downloads/OriginalUpdateBL vi OriginalUpdateBL
- modify line 68 by switching the listed URL with the following:
http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist
chmod 777 /etc/dansguardian/OrginialUpdateBL /etc/dansguardian/OrginialUpdateBL
when script is finished if you see any errors.
/etc/init.d/dansguardian restart
Fine Tuning the Filtering
Add Sites which are Exempt
vi /etc/dansguardian/exceptionsitelist
- this will speed up these sites
Customize the types of sites you want to block
vi /etc/dansguardian/bannedsites
- scroll to the bottom of the page and uncommit out the lines of the types of site you would like to filter out
- Restart dansguardian
/etc/init.d/dansguardian restart