No, we're in the USA - and I'll try your alias idea, that sounds interesting.

The whole wireless network already has its own IP range - the school has a few laptops but it's mostly for guest computers. I have no problem locking it down further ...

Luke Jaeger | Technology Coordinator
Pioneer Valley Performing Arts Charter Public School
www.pvpa.org

On Jan 7, 2010, at 10:13 AM, Robert Mortimer wrote:

Agreed -  Though in our case they aren't supposed to be grownups as
this is a grade 7 thru 12 secondary school. And the students using Tor

are doing it on their personal  laptops, which I don't have the
resources to police effectively.

I know it probably can't be blocked 100% - I just need to make it hard

enough for enough people.

I'll have to figure out the syntax for dumping that iblocklist into
SquidGuard. I tried pointing squid at that url but I'm not sure it
worked.


You can assign the list's IP addresses to an alias in PfSense and re- direct/drop them. Formatting and pasting them into the XML config file may be the way to go here

You can still personal laptops off by MAC address

You can use DHCP to assign a different IP range to guests and then add extra limits

Some "Big Brother" outfits demand a network access client to be installed, the NAC client then enforces policy as a pre-requisite for going on the network

You can tell Mom And Pop their angel likes surfing for porn.

Is this school in the UK?

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Commercial support available - https://portal.pfsense.org



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Commercial support available - https://portal.pfsense.org

Reply via email to