Re: default Squid install
"Frederic L." <[email protected]> Sat, 9 Oct 2004 15:16:58 +0200
| Newsgroups | gmane.comp.security.firewalls.smoothwall.general |
|---|---|
| Message-ID | <[email protected]> |
>Does the default squid installation on SmoothWall come >with any capabilities other than a web proxy? Looking >at the gui on the web interface for my smoothie, it >does not look like it does anything else by default. > >Using nothing but the default install of Squid, is >there a way to set up URL filters? I mean, if I >wanted to make sure no one from my internal network >could open a browser and go to www.SOME_PORN_SITE.com. > There's nothing else in the web GUI, but it's possible to make much more! The first you can do is install squidguardian on your smoothwall machine, following that tutorial : http://www.lowth.com/sg4sw/ Actually it did not work 100% for me, when database is edited, nothing is filtered anymore :-/ Other solution is to use url_regex from squid. That's what I did first for filtering, and it works quite well. If a part of url is matched by some words, I send other page to client. What I did : Added to /var/smoothwall/proxy/acl : acl sexywords url_regex -i "/etc/adult.keywords" deny_info ERR_NO_PORNO sexywords http_access deny sexywords Create a list of 'banned' words : [root@sw-flp root]# cat /etc/adult.keywords sex gay xxx boyz porn lesbian [root@sw-flp root]# and finally create error page ERR_NO_PORNO (It's in French, but you should und ;-) ): [root@sw-flp root]# cat /var/squid/smootherrors/ERR_NO_PORNO <HTML><HEAD> <TITLE>ERREUR: Le page demandée n'a pas pu jtre tilichargie</TITLE> </HEAD><BODY> <H1>ERREUR</H1> <H2>Le page demandée n'a pas pu jtre tilichargée</H2> <HR> <P> <A HREF="%U">%U</A> : le site auquel vous essayez d'accéder a été répertorié comme interdit. <P> Si vous pensez avoir regu ce message suite ` une erreur, contactez un responsable info (PLuc, Olivier ou Fred) [root@sw-flp root]# Hope this helps. Fred >I know you can do this with IPTables but squid seems >like a more logical choice. > >Thanks, > >-Jason > > > >_______________________________ >Do you Yahoo!? >Declare Yourself - Register online to vote today! >http://vote.yahoo.com >_______________________________________________ >gpl mailing list >[email protected] >http://lists.smoothwall.org/mailman/listinfo/gpl > >SmoothWall Stash - Buy Our Stuff! http://cafepress.com/smoothwall _______________________________________________ gpl mailing list [email protected] http://lists.smoothwall.org/mailman/listinfo/gpl SmoothWall Stash - Buy Our Stuff! http://cafepress.com/smoothwall