Sent from Samsung Mobile
-------- Original message --------
From: Brian Caouette <[email protected]>
Date: 01/08/2015 10:55 AM (GMT+12:00)
To: pfSense Support and Discussion Mailing List <[email protected]>
Subject: Re: [pfSense] How to restrict certain websites for certain
computers during certain times of the day?
Squid lock is the way to go. This is what I use at home. We set the categories
to block and no one can get to those sites. I've just recently played with
scheduling so now we can enable or disable categories at will. I no we could
open it up so mom and dad have full access to the net but honestly I have no
interest in accessing anything we've blocked. Not to mention is keeps everyone
safe. Get one infect computer in the house and we're all screwed. Been there
done that! Not fun because you have to take everyone offline until all pcs are
clean other wise you keep re infecting yourself.
Sent from my iPad
> On Jul 31, 2015, at 2:13 PM, Wue Bob <[email protected]>
> wrote:
>
>
>> On 31/07/15 17:36, Tim Koop wrote:
>> I have installed pfsense and I would like to block certain websites
>> during certain times of the day for certain computers. I've looked
>> around pfsense as well as a plugin or two, and this looks very
>> difficult or impossible to do. Anyone have any ideas?
>
> For home use (considering spoofing etc. ...) it might be sufficient to
> try a combination of firewall rule schedules [1] and firewall aliases to
> be used in firewall rules.
>
> One alias might contain IP/FQDN of your computers. You'll use them as
> source in the firewall rule/s allowing full access all the time.
> Similarly, another alias would define your kids' computers. This alias
> will again be the source in two firewall rules blocking some domains or
> limiting times of the day.
>
> Then, in a third alias you would list all domains you want to block.
> Obviously, this alias will be used as destination in another firewall
> rule and the source in this rule will be your kids' alias. In yet
> another firewall rule you would define a pass rule during certain times
> of the day, applying a schedule in this rule (=> advanced features). As
> source you'd again apply your kids' alias. (Since your kids connect with
> DHCP and you don't, it should probably be ok to use a LAN range instead
> of a kids' alias as source and placing this firewall rule after the full
> access rule.)
>
> Carefully designing aliases, schedules and rules, and also considering
> firewall rule processing order [2] should probably get you reasonably
> close to what you want ...
>
> Regards,
> Bob
>
> [1] https://doc.pfsense.org/index.php/Firewall_Rule_Schedules
> [2] https://doc.pfsense.org/index.php/Firewall_Rule_Processing_Order
>
>
> _______________________________________________
> pfSense mailing list
> https://lists.pfsense.org/mailman/listinfo/list
> Support the project with Gold! https://pfsense.org/gold
_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold
_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold
