Difference between revisions of "Installing Dansguardian"

From LinuxMCE
Jump to: navigation, search
 
(change the port to require less modifications.)
Line 16: Line 16:
 
Make the following changes:
 
Make the following changes:
 
# Delete UNCONFIGURED line
 
# Delete UNCONFIGURED line
# filterport = 8080
+
# filterport = 8081
 
# proxyip = 192.168.80.1  
 
# proxyip = 192.168.80.1  
 
# proxyport = 8888
 
# proxyport = 8888
Line 26: Line 26:
 
# Group root  
 
# Group root  
 
# Allow 192.168.80.0/25
 
# Allow 192.168.80.0/25
===Apache2===
+
 
    vi /etc/apache2/ports.conf
+
# commit out the 8080 line
+
 
==Restart Applications==
 
==Restart Applications==
 
     /etc/init.d/apache2 restart
 
     /etc/init.d/apache2 restart
 
     /etc/init.d/tinyproxy restart
 
     /etc/init.d/tinyproxy restart
 
     /etc/init.d/dansguardian restart
 
     /etc/init.d/dansguardian restart
==Configuring Firewall to forward to port 8080==
+
==Configuring Firewall to forward to port 8081==
 
You will need to go to [[LinuxMCE Admin Website]] Advanced > Network > Firewall Rules and add a new rule.  
 
You will need to go to [[LinuxMCE Admin Website]] Advanced > Network > Firewall Rules and add a new rule.  
 
Enter the following into the text boxes.
 
Enter the following into the text boxes.
  tcp 80 to 0 8080 192.168.80.1 port_forward  
+
  tcp 80 to 0 8081 192.168.80.1 port_forward  
 
==Troubleshooting==
 
==Troubleshooting==
  

Revision as of 00:41, 4 October 2007

Basics

DansGuardian is an award winning Open Source web content filter which currently runs on Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris. It filters the actual content of pages based on many methods including phrase matching, PICS filtering and URL filtering. It does not purely filter based on a banned list of sites like lesser totally commercial filters.

DansGuardian is designed to be completely flexible and allows you to tailor the filtering to your exact needs. It can be as draconian or as unobstructive as you want. The default settings are geared towards what a primary school might want but DansGuardian puts you in control of what you want to block.

DansGuardian is a true web content filter.

Installing packages

tinyproxy

   apt-get install tinyproxy

dansguardian

   apt-get install dansguardian

Configure Packages

Dansguardian

  vi  /etc/dansguardian/dansguardian.conf

Make the following changes:

  1. Delete UNCONFIGURED line
  2. filterport = 8081
  3. proxyip = 192.168.80.1
  4. proxyport = 8888
  5. usernameidmethodproxyauth = off

Tinyproxy

   vi /etc/tinyproxy/tinyproxy.conf  

Make the following changes

  1. User root
  2. Group root
  3. Allow 192.168.80.0/25

Restart Applications

   /etc/init.d/apache2 restart
   /etc/init.d/tinyproxy restart
   /etc/init.d/dansguardian restart

Configuring Firewall to forward to port 8081

You will need to go to LinuxMCE Admin Website Advanced > Network > Firewall Rules and add a new rule. Enter the following into the text boxes.

tcp 80 to 0 8081 192.168.80.1 port_forward 

Troubleshooting

Adding BlackList

A BlackList is a precompiled list of sites that are deemed potentially worrisome. This list can be obtained for http://www.URLBlacklist.com Here is a step by step guide to adding the biglist to your dansguardian filtering directories

    cd /etc/dansguardian    
    wget http://urlblacklist.com/downloads/OriginalUpdateBL
    vi OriginalUpdateBL
  • modify line 68 by switching the listed URL with the following:

http://urlblacklist.com/cgi-bin/commercialdownload.pl?type=download&file=bigblacklist

   chmod 777 /etc/dansguardian/OrginialUpdateBL
   /etc/dansguardian/OrginialUpdateBL

when script is finished if you see any errors.

   /etc/init.d/dansguardian restart

Fine Tuning the Filtering

Add Sites which are Exempt

   vi /etc/dansguardian/exceptionsitelist
  • this will speed up these sites

Customize the types of sites you want to block

   vi /etc/dansguardian/bannedsites
  • scroll to the bottom of the page and uncommit out the lines of the types of site you would like to filter out
  • Restart dansguardian
    /etc/init.d/dansguardian restart