[pfSense-discussion] Website filtering with pfSense on alix
Hi everyone, Is it possible to do website filtering on an Alix board? I setup some businesses with gateways using squid and dansguardian to blanket block the internet, and then allowing access on a per ip basis or allow certain websites for the rest of the users. Is this possible on an alix board using a CF by taking of caching, but using the dansguardian? I have see others asking the same, but not seen any replies. Or can this be setup using rules? Thanks.
Re: [pfSense-discussion] Website filtering with pfSense on alix
Gary Buckmaster schrieb: Mark Dueck wrote: Hi everyone, Is it possible to do website filtering on an Alix board? I setup some businesses with gateways using squid and dansguardian to blanket block the internet, and then allowing access on a per ip basis or allow certain websites for the rest of the users. Is this possible on an alix board using a CF by taking of caching, but using the dansguardian? I have see others asking the same, but not seen any replies. Or can this be setup using rules? Thanks. Mark, No, the embedded platform does not work with packages. Further, squid is an extreme resource hog and would kill most Alix board resources even under fairly light load. Lastly, Dansguardian isn't licensed to be free for commercial use, so you may well be violating their license by installing it for businesses. -Gary Well, with rules only, I guess it would work if you only have a handful of websites (B2B scenario) that are OK to visit. Rainer
Re: [pfSense-discussion] Website filtering with pfSense on alix
Hello, It certainly isn't a replacement for pfSense, but untangle [http://www.untangle.com/] is pretty useful. I'm running for some clients in bridging mode between pfSense and their internal network. It has much of the same functionality Barracuda boxes tout. It emails reports on usage, and has an interesting Java UI. Good luck! -Adrian - Original Message - From: Rainer Duffner [EMAIL PROTECTED] To: discussion@pfsense.com Sent: Thursday, August 28, 2008 10:27:16 AM GMT -05:00 US/Canada Eastern Subject: Re: [pfSense-discussion] Website filtering with pfSense on alix Gary Buckmaster schrieb: Mark Dueck wrote: Hi everyone, Is it possible to do website filtering on an Alix board? I setup some businesses with gateways using squid and dansguardian to blanket block the internet, and then allowing access on a per ip basis or allow certain websites for the rest of the users. Is this possible on an alix board using a CF by taking of caching, but using the dansguardian? I have see others asking the same, but not seen any replies. Or can this be setup using rules? Thanks. Mark, No, the embedded platform does not work with packages. Further, squid is an extreme resource hog and would kill most Alix board resources even under fairly light load. Lastly, Dansguardian isn't licensed to be free for commercial use, so you may well be violating their license by installing it for businesses. -Gary Well, with rules only, I guess it would work if you only have a handful of websites (B2B scenario) that are OK to visit. Rainer
Re: [pfSense-discussion] Website filtering with pfSense on alix
Rainer Duffner wrote: Gary Buckmaster schrieb: Mark Dueck wrote: Hi everyone, Is it possible to do website filtering on an Alix board? I setup some businesses with gateways using squid and dansguardian to blanket block the internet, and then allowing access on a per ip basis or allow certain websites for the rest of the users. Is this possible on an alix board using a CF by taking of caching, but using the dansguardian? I have see others asking the same, but not seen any replies. Or can this be setup using rules? Thanks. Mark, No, the embedded platform does not work with packages. Further, squid is an extreme resource hog and would kill most Alix board resources even under fairly light load. Lastly, Dansguardian isn't licensed to be free for commercial use, so you may well be violating their license by installing it for businesses. -Gary Ok, I see I will have to reconsider my dansguardian usage. I see that I can buy a license though, so with that it would be alright. Well, with rules only, I guess it would work if you only have a handful of websites (B2B scenario) that are OK to visit. If I would implement this with rules, I would have to all the allowed websites to the top of the list, and then below that block the ip address range that should not browse other sites? should that work? Rainer
Re: [pfSense-discussion] Website filtering with pfSense on alix
The following options will work on Alix: 1. You can also point your DNS to OpenDNS and setup filtering with them. Make it more secure by blocking other DNS providers. 2. Anotther thing you can do is setup DNS forwarder. The domain you don't want you define in DNS forwarder with an IP like 127.0.0.1 so that it goes nowhere. Mark J Crane Mark Dueck wrote: Rainer Duffner wrote: Gary Buckmaster schrieb: Mark Dueck wrote: Hi everyone, Is it possible to do website filtering on an Alix board? I setup some businesses with gateways using squid and dansguardian to blanket block the internet, and then allowing access on a per ip basis or allow certain websites for the rest of the users. Is this possible on an alix board using a CF by taking of caching, but using the dansguardian? I have see others asking the same, but not seen any replies. Or can this be setup using rules? Thanks. Mark, No, the embedded platform does not work with packages. Further, squid is an extreme resource hog and would kill most Alix board resources even under fairly light load. Lastly, Dansguardian isn't licensed to be free for commercial use, so you may well be violating their license by installing it for businesses. -Gary Ok, I see I will have to reconsider my dansguardian usage. I see that I can buy a license though, so with that it would be alright. Well, with rules only, I guess it would work if you only have a handful of websites (B2B scenario) that are OK to visit. If I would implement this with rules, I would have to all the allowed websites to the top of the list, and then below that block the ip address range that should not browse other sites? should that work? Rainer
Re: [pfSense-discussion] Website filtering with pfSense on alix
Mark Crane wrote: The following options will work on Alix: 1. You can also point your DNS to OpenDNS and setup filtering with them. Make it more secure by blocking other DNS providers. I'll have to check if OpenDNS can do the filtering as is required. Thanks. 2. Anotther thing you can do is setup DNS forwarder. The domain you don't want you define in DNS forwarder with an IP like 127.0.0.1 so that it goes nowhere. But if I want to blanket block and then allow only some, would this work? How would I setup the DNS forwarder in this case? Mark J Crane Mark Dueck wrote: Rainer Duffner wrote: Gary Buckmaster schrieb: Mark Dueck wrote: Hi everyone, Is it possible to do website filtering on an Alix board? I setup some businesses with gateways using squid and dansguardian to blanket block the internet, and then allowing access on a per ip basis or allow certain websites for the rest of the users. Is this possible on an alix board using a CF by taking of caching, but using the dansguardian? I have see others asking the same, but not seen any replies. Or can this be setup using rules? Thanks. Mark, No, the embedded platform does not work with packages. Further, squid is an extreme resource hog and would kill most Alix board resources even under fairly light load. Lastly, Dansguardian isn't licensed to be free for commercial use, so you may well be violating their license by installing it for businesses. -Gary Ok, I see I will have to reconsider my dansguardian usage. I see that I can buy a license though, so with that it would be alright. Well, with rules only, I guess it would work if you only have a handful of websites (B2B scenario) that are OK to visit. If I would implement this with rules, I would have to all the allowed websites to the top of the list, and then below that block the ip address range that should not browse other sites? should that work? Rainer
Re: [pfSense-discussion] Website filtering with pfSense on alix
Concerning the license restriction, I suggest you read the last couple paragraphs of the Copyright page. You may have nothing to worry about depending on where you downloaded it from. Ron On Thursday 28 August 2008 08:27, Mark Dueck wrote: Rainer Duffner wrote: Gary Buckmaster schrieb: Mark Dueck wrote: Hi everyone, Is it possible to do website filtering on an Alix board? I setup some businesses with gateways using squid and dansguardian to blanket block the internet, and then allowing access on a per ip basis or allow certain websites for the rest of the users. Is this possible on an alix board using a CF by taking of caching, but using the dansguardian? I have see others asking the same, but not seen any replies. Or can this be setup using rules? Thanks. Mark, No, the embedded platform does not work with packages. Further, squid is an extreme resource hog and would kill most Alix board resources even under fairly light load. Lastly, Dansguardian isn't licensed to be free for commercial use, so you may well be violating their license by installing it for businesses. -Gary Ok, I see I will have to reconsider my dansguardian usage. I see that I can buy a license though, so with that it would be alright. Well, with rules only, I guess it would work if you only have a handful of websites (B2B scenario) that are OK to visit. If I would implement this with rules, I would have to all the allowed websites to the top of the list, and then below that block the ip address range that should not browse other sites? should that work? Rainer
Re: [pfSense-discussion] Website filtering with pfSense on alix
Ron Lockard wrote: Concerning the license restriction, I suggest you read the last couple paragraphs of the Copyright page. You may have nothing to worry about depending on where you downloaded it from. Ron I read it and came to the conclusion that I am not violating the license. I am currently using licensed ClarkConnect, and squid and dansguardian were installed by default. Thank you. On Thursday 28 August 2008 08:27, Mark Dueck wrote: Rainer Duffner wrote: Gary Buckmaster schrieb: Mark Dueck wrote: Hi everyone, Is it possible to do website filtering on an Alix board? I setup some businesses with gateways using squid and dansguardian to blanket block the internet, and then allowing access on a per ip basis or allow certain websites for the rest of the users. Is this possible on an alix board using a CF by taking of caching, but using the dansguardian? I have see others asking the same, but not seen any replies. Or can this be setup using rules? Thanks. Mark, No, the embedded platform does not work with packages. Further, squid is an extreme resource hog and would kill most Alix board resources even under fairly light load. Lastly, Dansguardian isn't licensed to be free for commercial use, so you may well be violating their license by installing it for businesses. -Gary Ok, I see I will have to reconsider my dansguardian usage. I see that I can buy a license though, so with that it would be alright. Well, with rules only, I guess it would work if you only have a handful of websites (B2B scenario) that are "OK" to visit. If I would implement this with rules, I would have to all the allowed websites to the top of the list, and then below that block the ip address range that should not browse other sites? should that work? Rainer
