[SLUG] Subscription-based netfiltering (parentally speaking)

2011-06-21 Thread K L
Hi All, 

does anyone know of any linux-based filtering software I can put in place to 
protect him from himself? 

Requirements would be; 

Subscription-based; so, someone out there keeping the list of sites, keywords, 
extensions, etc. up to date.
Ability for me to add to it for personal choice; - effectively contribute
Ability to IP (or MAC) restrict it's use; - so it's only him and not us. 

I know of Dansguard, but AFAIA, that is a host-based solution.

What else is there pls? 
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Subscription-based netfiltering (parentally speaking)

2011-06-21 Thread Erik de Castro Lopo
K L wrote:

 Hi All, 
 
 does anyone know of any linux-based filtering software I can put in place to 
 protect him from himself? 
 
 Requirements would be; 
 
 Subscription-based; so, someone out there keeping the list of sites,
 keywords, extensions, etc. up to date.
 Ability for me to add to it for personal choice; - effectively contribute
 Ability to IP (or MAC) restrict it's use; - so it's only him and not us. 

I refer you to the Scunthorpe problem:

   https://secure.wikimedia.org/wikipedia/en/wiki/Scunthorpe_problem

one of the many unintended consquences of filtering:

   
https://secure.wikimedia.org/wikipedia/en/wiki/Swear_filter#Unintended_consequences

Furthermore, if your child is more than about 12 years old and at all
technically literate, they will figure out how to bypass it.

A better solution might be to put the computer in the living room
or somewhere else where there is a lot of regular family traffic.

Regards,
Erik (father of an 8 year old)
-- 
--
Erik de Castro Lopo
http://www.mega-nerd.com/
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Subscription-based netfiltering (parentally speaking)

2011-06-21 Thread Brendan Molloy
You could also consider the WOT tool: http://www.mywot.com/.

It's ja plugin for a web browser that shows a rating based on child
safety, trustworthiness, etc, so instead of purely blocking, simply
explain to your child links that show up with an orange circle shouldn't
be taken at face value, and red circled links should be possibly avoided
entirely. The ratings are set by users of the client itself, so
crowd-sourced classification.

I've been using WOT for a while now. Very nice for avoiding random
phishing links on Google :)

Erik de Castro Lopo wrote:
 K L wrote:
 
 Hi All, 

 does anyone know of any linux-based filtering software I can put in place to 
 protect him from himself? 

 Requirements would be; 

 Subscription-based; so, someone out there keeping the list of sites,
 keywords, extensions, etc. up to date.
 Ability for me to add to it for personal choice; - effectively contribute
 Ability to IP (or MAC) restrict it's use; - so it's only him and not us. 
 
 I refer you to the Scunthorpe problem:
 
https://secure.wikimedia.org/wikipedia/en/wiki/Scunthorpe_problem
 
 one of the many unintended consquences of filtering:
 

 https://secure.wikimedia.org/wikipedia/en/wiki/Swear_filter#Unintended_consequences
 
 Furthermore, if your child is more than about 12 years old and at all
 technically literate, they will figure out how to bypass it.
 
 A better solution might be to put the computer in the living room
 or somewhere else where there is a lot of regular family traffic.
 
 Regards,
 Erik (father of an 8 year old)

-- 
Regards,
Brendan Molloy

M: +61 434 069 776
T: @piecritic
W: http://bbqsrc.net
E: bren...@bbqsrc.net
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Subscription-based netfiltering (parentally speaking)

2011-06-21 Thread K L
Well aware of the scunthorpe problem Erik. 

As for bypassing the filter; 

1. that is one reason I want it gateway/router based as opposed to host based. 
If he doesn't have the passwords to the gateway, he can't mess with it. 
2. He has thus far shown zero interest in technical literacy. Still not sure 
whether that's a bane or blessing?



- Original Message -
From: Erik de Castro Lopo mle+s...@mega-nerd.com
To: slug@slug.org.au
Sent: Tuesday, 21 June, 2011 4:32:46 PM
Subject: Re: [SLUG] Subscription-based netfiltering (parentally speaking)


Furthermore, if your child is more than about 12 years old and at all
technically literate, they will figure out how to bypass it.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Subscription-based netfiltering (parentally speaking)

2011-06-21 Thread Kevin Saenz
I am assuming that the computer is in the loungeroom/family room.

I guess with a subscription based tool you might need to use an authentication 
based system which could be very annoying with the number of popups you'd get 
if you require a user based internet filter.

about 10 years ago I used Squid with Dan's Guardian with one of my employers. I 
restricted IP based and user based authentication. but found user based 
authentication to give users a very bad experience.

Now with my kids aged 10, 9 and 5. I have 4 computers in the family room and it 
tends to reduce the the unwanted content but I also went the way of an evil 
corp and used the inbuilt tool called parental controls, at least I can 
restrict out/in going emails, Instant messaging and internet access.


 Hi All, 
 
 does anyone know of any linux-based filtering software I can put in place to 
 protect him from himself? 
 
 Requirements would be; 
 
 Subscription-based; so, someone out there keeping the list of sites, 
 keywords, extensions, etc. up to date.
 Ability for me to add to it for personal choice; - effectively contribute
 Ability to IP (or MAC) restrict it's use; - so it's only him and not us. 
 
 I know of Dansguard, but AFAIA, that is a host-based solution.
 
 What else is there pls? 
 -- 
 SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
 Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
 

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Subscription-based netfiltering (parentally speaking)

2011-06-21 Thread Grant Street

Have a look at

http://whitetrash.sourceforge.net/

* It protects against Malware attacks etc
* Can be used in conjunction with dansguardian
* the user's name is put against the whitelist entry
* Checks against google's safe browsings API
* authentication
* can run it in learning mode to start with ...

On 21/06/11 16:17, K L wrote:

Hi All,

does anyone know of any linux-based filtering software I can put in place to 
protect him from himself?

Requirements would be;

Subscription-based; so, someone out there keeping the list of sites, keywords, 
extensions, etc. up to date.
Ability for me to add to it for personal choice; - effectively contribute
Ability to IP (or MAC) restrict it's use; - so it's only him and not us.

I know of Dansguard, but AFAIA, that is a host-based solution.

What else is there pls?



--
Grant Street
Senior Systems Engineer

T: +61 2 9383 4800 (main)
T: +61 2 938 34882 (direct)
F: +61 2 9383 4801 (fax)

Animal Logic

*See our latest work at http://www.animallogic.com/work*

Please think of the environment before printing this email. This email
and any attachments may be confidential and/or privileged. If you are
not the intended recipient of this email, you must not disclose or use
the information contained in it. Please notify the sender immediately
and delete this document if you have received it in error. We do not
guarantee this email is error or virus free.



--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Subscription-based netfiltering (parentally speaking)

2011-06-21 Thread Mark Walkom
DNS filtering could be an option;
http://www.opendns.com/

On 21 June 2011 16:17, K L k...@attitia.com wrote:

 Hi All,

 does anyone know of any linux-based filtering software I can put in place
 to protect him from himself?

 Requirements would be;

 Subscription-based; so, someone out there keeping the list of sites,
 keywords, extensions, etc. up to date.
 Ability for me to add to it for personal choice; - effectively contribute
 Ability to IP (or MAC) restrict it's use; - so it's only him and not us.

 I know of Dansguard, but AFAIA, that is a host-based solution.

 What else is there pls?
 --
 SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
 Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Subscription-based netfiltering (parentally speaking)

2011-06-21 Thread Jeremy Visser
Thus spake K L:
 1. that is one reason I want it gateway/router based as opposed to 
 host based. If he doesn't have the passwords to the gateway, he
 can't mess with it.

I can picture the owl with the 'O RLY?' caption beneath it right now. In
this context, we need to make the use of the words can't, won't, and
never a crime.

 2. He has thus far shown zero interest in technical literacy. Still 
 not sure whether that's a bane or blessing?

He doesn't know what he has [freedom in this context] until he loses it.
Of course there is no technical desire to bypass it yet -- you haven't
blocked anything yet.

Note that this applies to anything, not just filtering. Once something
stops working, and it is apparent you won't be able/willing to 'fix' it,
you would be very surprised how quickly the necessary knowledge will be
gained.



signature.asc
Description: OpenPGP digital signature
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Re: [SLUG] Subscription-based netfiltering (parentally speaking)

2011-06-21 Thread Sridhar Dhanapalan
On 21 June 2011 16:43, Brendan Molloy bren...@bbqsrc.net wrote:
 You could also consider the WOT tool: http://www.mywot.com/.

 It's ja plugin for a web browser that shows a rating based on child
 safety, trustworthiness, etc, so instead of purely blocking, simply
 explain to your child links that show up with an orange circle shouldn't
 be taken at face value, and red circled links should be possibly avoided
 entirely. The ratings are set by users of the client itself, so
 crowd-sourced classification.

 I've been using WOT for a while now. Very nice for avoiding random
 phishing links on Google :)

Child safety online is a critical factor in my line of work. People
have developed the idea that filtering equals safety.

I would argue that it is much better in the long run to place the
filters in the kids' heads, i.e. educate them to look after
themselves.

I haven't tried WOT, but it sounds like a tool that could be used in
this way. I'd be very interested to know of any other tools that may
assist in achieving this outcome.

Sridhar


-- 
Our mission is to enhance learning opportunities for the 400,000
children, aged 4-15, living in remote Australia, by providing each one
with a connected XO laptop as part of a sustainable training and
support program, by 2014.
 http://www.laptop.org.au/
 http://www.laptop.org.au/participate
 http://dev.laptop.org.au/participate
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Subscription-based netfiltering (parentally speaking)

2011-06-21 Thread Heracles
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


On 21/06/11 16:43, Brendan Molloy wrote:
 You could also consider the WOT tool: http://www.mywot.com/.
 
 It's ja plugin for a web browser that shows a rating based on child
 safety, trustworthiness, etc, so instead of purely blocking, simply
 explain to your child links that show up with an orange circle shouldn't
 be taken at face value, and red circled links should be possibly avoided
 entirely. The ratings are set by users of the client itself, so
 crowd-sourced classification.
 
 I've been using WOT for a while now. Very nice for avoiding random
 phishing links on Google :)
 
 Erik de Castro Lopo wrote:
 K L wrote:

It has one unfortunate flaw in that it blocks domains rather than
websites. So if at some time has hosted even one dodgy website out of
the thousands it hosts or if a small number of users find the website
not to their taste they can taint the whole domain.

Heracles
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk4BIZUACgkQybPcBAs9CE8ThgCgudlWPqbicy23cDA4Ifd34nmr
cEkAoJy/8lf9hLpkk8wcyZvNYx1R5MKl
=NZYw
-END PGP SIGNATURE-
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Subscription-based netfiltering (parentally speaking)

2011-06-21 Thread James Linder

On 22/06/2011, at 6:56 AM, slug-requ...@slug.org.au wrote:

 As for bypassing the filter; 
 
 1. that is one reason I want it gateway/router based as opposed to host 
 based. If he doesn't have the passwords to the gateway, he can't mess with 
 it. 
 2. He has thus far shown zero interest in technical literacy. Still not sure 
 whether that's a bane or blessing?

Ah the Conroy mindset!
James--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Subscription-based netfiltering (parentally speaking)

2011-06-21 Thread James Linder

On 22/06/2011, at 8:38 AM, K L wrote:

 Steady on. :-(
 
 I can understand the simile, but I'm not entirely sure I appreciate the 
 comparison. 
 
 This is, after all, a parent looking after the innocence of his child. 
 
 It's not like he's 18 and able to make sane choices for himself.
 
 
 
 - Original Message -
 From: James Linder j...@tigger.ws
 
 
 Ah the Conroy mindset!

My answer was very gentle and not intended as a slight, but perhaps it should 
have been ...

The Conroy Mindset pours scorn over any one who (no doubt whatsoever, with the 
best intentions) thinks you can apply a technical solution to a problem that 
needs to be addressed another (and harder) way.
Your comments about the router password SHOUT of your naviete.

If you are a parent looking after the innocence of his child then be aware 
this is a 24/7 multi-decade task - I've got the Tee shirt 

Other comments on the list were insightful.
James--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Subscription-based netfiltering (parentally speaking)

2011-06-21 Thread david



James Linder wrote:

On 22/06/2011, at 8:38 AM, K L wrote:


Steady on. :-(

I can understand the simile, but I'm not entirely sure I appreciate the comparison. 

This is, after all, a parent looking after the innocence of his child. 


It's not like he's 18 and able to make sane choices for himself.



- Original Message -
From: James Linder j...@tigger.ws


Ah the Conroy mindset!


My answer was very gentle and not intended as a slight, but perhaps it should 
have been ...

The Conroy Mindset pours scorn over any one who (no doubt whatsoever, with the 
best intentions) thinks you can apply a technical solution to a problem that 
needs to be addressed another (and harder) way.
Your comments about the router password SHOUT of your naviete.

If you are a parent looking after the innocence of his child then be aware this is a 24/7 multi-decade task - I've got the Tee shirt 


Other comments on the list were insightful.



Second the motion! If anyone seriously thinks that filtering keeps kids 
away from anything they are naive. Kids go to friends places or even use 
mobile phones. Kids learn work-arounds from each other, or from google. 
Of course, we could use the Chinese method.


Being 18 doesn't have much to do with it either. That's a very arbitrary 
line drawn in very variable sand. I've never noticed that children are 
all that innocent - at least my 5 weren't. Mostly the protection is 
there to make adults feel better when the real protection comes from 
24/7 multi-decade parenting.

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Subscription-based netfiltering (parentally speaking)

2011-06-21 Thread K L
I wasn't initially slighted. (Perhaps I should've put a winkie in my post). 

I think I am however now.

And not that I have any requirement to justify my parenting approach to anyone 
on here, but for the record; despite the appropriate teachings - so much so 
that facebook, twitter, etc are things of scorn - boys will still be boys. 

I know. I have my very own Tee in that regard.  

And not yet having that technical literacy, almost puts him in the same group 
as his grandparents. But only almost. 

I'm very happy for you have such . academically egalitarian values. 



- Original Message -
From: James Linder j...@tigger.ws
To: slug@slug.org.au
Sent: Wednesday, 22 June, 2011 11:17:16 AM
Subject: Re: [SLUG] Subscription-based netfiltering (parentally speaking)


On 22/06/2011, at 8:38 AM, K L wrote:

 Steady on. :-(
 
 I can understand the simile, but I'm not entirely sure I appreciate the 
 comparison. 
 
 This is, after all, a parent looking after the innocence of his child. 
 
 It's not like he's 18 and able to make sane choices for himself.
 
 
 
 - Original Message -
 From: James Linder j...@tigger.ws
 
 
 Ah the Conroy mindset!

My answer was very gentle and not intended as a slight, but perhaps it should 
have been ...

The Conroy Mindset pours scorn over any one who (no doubt whatsoever, with the 
best intentions) thinks you can apply a technical solution to a problem that 
needs to be addressed another (and harder) way.
Your comments about the router password SHOUT of your naviete.

If you are a parent looking after the innocence of his child then be aware 
this is a 24/7 multi-decade task - I've got the Tee shirt 

Other comments on the list were insightful.
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Subscription-based netfiltering (parentally speaking)

2011-06-21 Thread Jake Anderson

On 06/21/2011 04:17 PM, K L wrote:

Hi All,

does anyone know of any linux-based filtering software I can put in place to 
protect him from himself?

Requirements would be;

Subscription-based; so, someone out there keeping the list of sites, keywords, 
extensions, etc. up to date.
Ability for me to add to it for personal choice; - effectively contribute
Ability to IP (or MAC) restrict it's use; - so it's only him and not us.

I know of Dansguard, but AFAIA, that is a host-based solution.

What else is there pls?

run a transparent proxy on the router
look at the logs

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Subscription-based netfiltering (parentally speaking)

2011-06-21 Thread Jon Jermey
I believe the main motive for keeping 'adult' material away from 
children is to try and prevent them from embarrassing their parents with 
questions like: Daddy, what does it mean when two people do THIS?


Jon.



Being 18 doesn't have much to do with it either. That's a very arbitrary
line drawn in very variable sand. I've never noticed that children are
all that innocent - at least my 5 weren't. Mostly the protection is
there to make adults feel better when the real protection comes from
24/7 multi-decade parenting.


--
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Subscription-based netfiltering (parentally speaking)

2011-06-21 Thread Kevin Saenz
LOL


 I believe the main motive for keeping 'adult' material away from children is 
 to try and prevent them from embarrassing their parents with questions like: 
 Daddy, what does it mean when two people do THIS?
 
 Jon.
 
 
 Being 18 doesn't have much to do with it either. That's a very arbitrary
 line drawn in very variable sand. I've never noticed that children are
 all that innocent - at least my 5 weren't. Mostly the protection is
 there to make adults feel better when the real protection comes from
 24/7 multi-decade parenting.
 
 -- 
 -- 
 SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
 Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
 

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html