parental control - outbound firewall?
I have been using the Moreshet service since the days of Actcom but in the past couple of months it has been down very frequently for several hours meaning I could not use the Internet at all. I am thinking on setting up something on the computer use by my children. First I thought setting up a proxy but I'd like to filter everything including chat and similar things and then allow services on a case base case. The latest idea I had was to configure a firewall on my the computer of my children to and let that filter the services and the sites. Any idea how to do that (using Ubuntu GNU/Linux). ? regards Gabor = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: parental control - outbound firewall?
Hi Gabor, Filtering everything? what if your kids using Google to search for things? Google will send them to web sites that you closed due to too-much restriction? do you really want your kids to call you to add sites so they can read what they were looking for? How about blocking sites progressively? Anyway, squid could be helpful here IMHO. Thanks, Hetz On Tue, Sep 9, 2008 at 11:11 AM, Gabor Szabo [EMAIL PROTECTED] wrote: I have been using the Moreshet service since the days of Actcom but in the past couple of months it has been down very frequently for several hours meaning I could not use the Internet at all. I am thinking on setting up something on the computer use by my children. First I thought setting up a proxy but I'd like to filter everything including chat and similar things and then allow services on a case base case. The latest idea I had was to configure a firewall on my the computer of my children to and let that filter the services and the sites. Any idea how to do that (using Ubuntu GNU/Linux). ? regards Gabor = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED] -- Skepticism is the lazy person's default position. my blog (hebrew): http://benhamo.org = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: parental control - outbound firewall?
On Tue, Sep 09, 2008 at 11:11:06AM +0300, Gabor Szabo wrote: I have been using the Moreshet service since the days of Actcom but in the past couple of months it has been down very frequently for several hours meaning I could not use the Internet at all. I am thinking on setting up something on the computer use by my children. First I thought setting up a proxy but I'd like to filter everything including chat and similar things and then allow services on a case base case. The latest idea I had was to configure a firewall on my the computer of my children to and let that filter the services and the sites. The classic way of doing it is to use DansGuardian which couples with Squid and port redirection so that anything going out on port 80 gets redirected to squid. Aka trasparent proxy. Squid then forwards it to DansGuardian. The rub is that DansGuardian is relatively stupid. It can not tell the difference between chicken breast, breast cancer or naked breast. That may be a difference to you, it may not. I have no idea of how much effort that level of AI would take, and it may not be really possible anyway. AFAIK, it does not support Hebrew. Or more accurately, it may not come with word lists for Hebrew, and they may not be available. How ISP's filter content, if they do at all, would, I expect be a closely guarded competitve secret. The other question is what exactly do you filter? I have no idea of how skilled your children are in circumventing firewalls. Many things are now designed to traverse NAT and look like regular http requests. One multiplayer game was set up as an example to use DNS (UDP port 53) just to show it can be done. SKYPE has made an art of sneaking through firewalls. Good if you want to use it, bad if you are paying for someone else's use of bandwidth. You also can for example, cause DNS names to resolve nowhere or back to your server. I do that for the particulary bad ones, and also set up a PERL script to add firewall reject rules based upon a list. To be honest, I'm not even sure it's still in use. I found that over the period of a day DansGuardian blocked many sites I wanted to go to, e.g. Sky News, LGF, torrent search sites and so on. I just gave up. Geoff. -- Geoffrey S. Mendelson, Jerusalem, Israel [EMAIL PROTECTED] N3OWJ/4X1GM = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
RE: parental control - outbound firewall?
Hi Gabor, As a parent, I've decided not to restrict my kids' access to the Internet by technological means. Instead, I've discussed with each of them the do's and don'ts of surfing the Internet. As part of the struggle against various censorshi big-brother laws, ISOC and Bezeq have come up with a surprisingly well done guide (and advertising campaign) for safe surfing: http://www.safe.org.il/ You may find it of interest/useful. Cheers, Rony (Disclaimer: I'm a member of ISOC and a Bezeq customer, but in no way affiliated with the above initiative) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gabor Szabo Sent: Tuesday, September 09, 2008 11:11 AM To: Israel Linux Mailing list Subject: parental control - outbound firewall? I have been using the Moreshet service since the days of Actcom but in the past couple of months it has been down very frequently for several hours meaning I could not use the Internet at all. I am thinking on setting up something on the computer use by my children. First I thought setting up a proxy but I'd like to filter everything including chat and similar things and then allow services on a case base case. The latest idea I had was to configure a firewall on my the computer of my children to and let that filter the services and the sites. Any idea how to do that (using Ubuntu GNU/Linux). ? regards Gabor = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
RE: parental control - outbound firewall?
I use DansGuargian using DENY ALL and just a small whitelist. my kids are 8 and 6. I tried explaining but it was to much to resist the temptation when at a kids portal got a graphic link to a flash game with rated content. I think that only if you reject flash you may have a solution. I do not think that any parental control can intercept and censor the content of a flash movie or game. - Original Message - Subject: RE: parental control - outbound firewall? From: ronys [EMAIL PROTECTED] To: 'Gabor Szabo' [EMAIL PROTECTED] CC: 'Israel Linux Mailing list' linux-il@cs.huji.ac.il Date: 09-09-2008 14:46 Hi Gabor, As a parent, I've decided not to restrict my kids' access to the Internet by technological means. Instead, I've discussed with each of them the do's and don'ts of surfing the Internet. As part of the struggle against various censorshi big-brother laws, ISOC and Bezeq have come up with a surprisingly well done guide (and advertising campaign) for safe surfing: http://www.safe.org.il/ You may find it of interest/useful. Cheers, Rony (Disclaimer: I'm a member of ISOC and a Bezeq customer, but in no way affiliated with the above initiative) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gabor Szabo Sent: Tuesday, September 09, 2008 11:11 AM To: Israel Linux Mailing list Subject: parental control - outbound firewall? I have been using the Moreshet service since the days of Actcom but in the past couple of months it has been down very frequently for several hours meaning I could not use the Internet at all. I am thinking on setting up something on the computer use by my children. First I thought setting up a proxy but I'd like to filter everything including chat and similar things and then allow services on a case base case. The latest idea I had was to configure a firewall on my the computer of my children to and let that filter the services and the sites. Any idea how to do that (using Ubuntu GNU/Linux). ? regards Gabor = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED] To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Byte per month?
I use vnstat, has both text and web based interfaced. Ohad On Tue, Sep 9, 2008 at 1:46 AM, Geoffrey S. Mendelson [EMAIL PROTECTED]wrote: How do I keep track of the number of bytes sent and received per month? To be exact I'm running a 2.4.34 kernel, and the interface is ppp0 using the old pptp-linux user space driver. Being able to resolve it to the something like every 10 minutes would be fine, I can save the results to a file and tabulate them later. Thanks, Geoff. -- Geoffrey S. Mendelson, Jerusalem, Israel [EMAIL PROTECTED] N3OWJ/4X1GM = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: parental control - outbound firewall?
On Tue, Sep 09, 2008, Hetz Ben Hamo wrote about Re: parental control - outbound firewall?: Hi Gabor, Filtering everything? what if your kids using Google to search for things? Google will send them to web sites that you closed due to too-much restriction? do you really want your kids to call you to add sites so they can read what they were looking for? I guess this really depends on your children's age. If your child is 5, you'd probably really want him or her to just use a couple of specific sites that you authorize. Google will not make sense anyway (a child of that age usually cannot even read or write). If your child is 12, you made a good point - the child is very likely to Google his favorite singer of whom you never heard, or go to a children site of whom you never heard - all this while you expected him to go to slashdot or linux.org ;-) At some point have no alternative but to let go - you have no hope to understand everything that your 16-year-old (or whatever) children understand. The Lebanese-American author Khalil Gibran put it very beautifully: [1] Your children are not your children. They are the sons and daughters of Life's longing for itself. They come through you but not from you, And though they are with you, yet they belong not to you. You may give them your love but not your thoughts. For they have their own thoughts. You may house their bodies but not their souls, For their souls dwell in the house of tomorrow, which you cannot visit, not even in your dreams. Khalil Gibran, The Prophet (1923), Chapter 4 (Children) [1] http://leb.net/~mira/works/prophet/prophet4.html -- Nadav Har'El| Tuesday, Sep 9 2008, 10 Elul 5768 [EMAIL PROTECTED] |- Phone +972-523-790466, ICQ 13349191 |Drink varnish and you'll get a lovely http://nadav.harel.org.il |finish. = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
