[gentoo-user] [gentoo]Block certain websites

[gentoo-user] [gentoo]Block certain websites

[Balaviswanathan Vaidyanathan]

[-- Attachment #1: Type: text/plain, Size: 247 bytes --]

Hi all,
   
  This is to know how to block certain websites as I intend to set up a browsing centre based on Gentoo OS
   
  Thanks and Regards
   
  Bala

       
---------------------------------
 Unlimited freedom, unlimited storage. Get it now

[-- Attachment #2: Type: text/html, Size: 452 bytes --]

Re: [gentoo-user] [gentoo]Block certain websites

[darren kirby]

quoth the Balaviswanathan Vaidyanathan:
> Hi all,
>
>   This is to know how to block certain websites as I intend to set up a
> browsing centre based on Gentoo OS
>
>   Thanks and Regards
>
>   Bala

Try Dans's Guardian...or just Squid (proxy server) will work as well.

-d
-- 
darren kirby :: Part of the problem since 1976 :: http://badcomputer.org
"...the number of UNIX installations has grown to 10, with more expected..."
- Dennis Ritchie and Ken Thompson, June 1972
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] [gentoo]Block certain websites

[Alan McKinnon]

On Saturday 15 September 2007, Balaviswanathan Vaidyanathan wrote:
> Hi all,
>
>   This is to know how to block certain websites as I intend to set up
> a browsing centre based on Gentoo OS

squid

If you want an interface that is easier to use than editing squid's conf 
file, there are several front ends to choose from. You could start with 
squidguard

You probably want to stay away from directly using iptables for this, as 
blocking site access based on ip address gets you into very big amounts 
of trouble very quickly. Think virtual hosting here.


alan



-- 
Optimists say the glass is half full,
Pessimists say the glass is half empty,
Developers say wtf is the glass twice as big as it needs to be?

Alan McKinnon
alan at linuxholdings dot co dot za
+27 82, double three seven, one nine three five
-- 
gentoo-user@gentoo.org mailing list

[gentoo-user] Re: [gentoo]Block certain websites

[Alexander Skwar]

· Balaviswanathan Vaidyanathan <vbnath1981@yahoo.co.in>:

> Hi all,
>    
>   This is to know how to block certain websites as I intend to set up a browsing centre based on Gentoo OS

Forget about it. There are far too many open proxies out
there, like my own at <http://alexander.skwar.name/~askwar/stuff/proxy/>.
Blacklists don't work.

BTW: This has nothing at all to do with Gentoo.

Alexander Skwar
-- 
A complex system that works is invariably found to have evolved from a
simple system that works.


-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Re: [gentoo]Block certain websites

[Alan McKinnon]

On Sunday 16 September 2007, Alexander Skwar wrote:
> · Balaviswanathan Vaidyanathan <vbnath1981@yahoo.co.in>:
> > Hi all,
> >
> >   This is to know how to block certain websites as I intend to set
> > up a browsing centre based on Gentoo OS
>
> Forget about it. There are far too many open proxies out
> there, like my own at
> <http://alexander.skwar.name/~askwar/stuff/proxy/>

/me makes a mental note to bookmark this

/me makes another note to buy Alexander a beer next time I go to Europe

:-)

alan


-- 
Optimists say the glass is half full,
Pessimists say the glass is half empty,
Developers say wtf is the glass twice as big as it needs to be?

Alan McKinnon
alan at linuxholdings dot co dot za
+27 82, double three seven, one nine three five
--
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] [gentoo]Block certain websites

[Dale]

[-- Attachment #1: Type: text/plain, Size: 530 bytes --]

Balaviswanathan Vaidyanathan wrote:
> Hi all,
>  
> This is to know how to block certain websites as I intend to set up a
> browsing centre based on Gentoo OS
>  
> Thanks and Regards
>  
> Bala
>
> ------------------------------------------------------------------------
> Unlimited freedom, unlimited storage. Get it now
> <http://in.rd.yahoo.com/tagline_mail_2/*http://help.yahoo.com/l/in/yahoo/mail/yahoomail/tools/tools-08.html/>


Could you not add the sites to your hosts file and point them back to local?

Dale

:-)  :-)

[-- Attachment #2: Type: text/html, Size: 946 bytes --]

Re: [gentoo-user] [gentoo]Block certain websites

[William Kenworthy]

On Sun, 2007-09-16 at 06:52 -0500, Dale wrote:
> Balaviswanathan Vaidyanathan wrote: 
> > Hi all,
> >  
> > This is to know how to block certain websites as I intend to set up
> > a browsing centre based on Gentoo OS
> >  
> > Thanks and Regards
> >  
> > Bala
> > 
> > ____________________________________________________________________
> > Unlimited freedom, unlimited storage. Get it now
> 
> Could you not add the sites to your hosts file and point them back to
> local?
> 
> Dale
> 
> :-)  :-)

http://everthingisnt.com/hosts.html

:)

BillK

-- 
William Kenworthy <billk@iinet.net.au>
Home in Perth!
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] [gentoo]Block certain websites

[William Kenworthy]

On Sun, 2007-09-16 at 20:13 +0800, William Kenworthy wrote:
> On Sun, 2007-09-16 at 06:52 -0500, Dale wrote:
> > Balaviswanathan Vaidyanathan wrote: 
> > > Hi all,
> > >  
> > > This is to know how to block certain websites as I intend to set up
> > > a browsing centre based on Gentoo OS
> > >  
> > > Thanks and Regards
> > >  
> > > Bala
> > > 
> > > ____________________________________________________________________
> > > Unlimited freedom, unlimited storage. Get it now
> > 
> > Could you not add the sites to your hosts file and point them back to
> > local?
> > 
> > Dale
> > 
> > :-)  :-)
> 

Sorry, spelling mistake ...

http://everythingisnt.com/hosts.html

:(

> :)
> 
> BillK
> 
> -- 
> William Kenworthy <billk@iinet.net.au>
> Home in Perth!
-- 
William Kenworthy <billk@iinet.net.au>
Home in Perth!
-- 
gentoo-user@gentoo.org mailing list

[gentoo-user] Re: [gentoo]Block certain websites

[Alexander Skwar]

· Dale <dalek1967@bellsouth.net>:

> Could you not add the sites to your hosts file and point them back to local?

No. This won't hinder a user from accessing a proxy site
and have that site fetch and display the content. Check
out one of the MANY MANY proxy sites at http://proxy.org/.

Alexander Skwar
-- 
Ad astra per aspera.
        [To the stars by aspiration.]


-- 
gentoo-user@gentoo.org mailing list

[gentoo-user] Re: Re: [gentoo]Block certain websites

[Alexander Skwar]

· Alan McKinnon <alan@linuxholdings.co.za>:

> On Sunday 16 September 2007, Alexander Skwar wrote:
>> · Balaviswanathan Vaidyanathan <vbnath1981@yahoo.co.in>:
>> > Hi all,
>> >
>> >   This is to know how to block certain websites as I intend to set
>> > up a browsing centre based on Gentoo OS
>>
>> Forget about it. There are far too many open proxies out
>> there, like my own at
>> <http://alexander.skwar.name/~askwar/stuff/proxy/>
> 
> /me makes a mental note to bookmark this

Feel free to use it. No guarantees about performance, though ;)

> /me makes another note to buy Alexander a beer next time I go to Europe
> 
> :-)

*g* Thanks.

One important thing to note, though. It's important to remember
that the proxy operator could easily sniff all the traffic that's
going through the proxy. The proxy needs to be able to read the
traffic. 

Now, I swear that *I* am not going to log any traffic going
through my system. But you've gotta decide if you trust me...

On a larger note, exactly this question was the reason for the
recent "tor problem", cf. <http://www.derangedsecurity.com/time-to-reveal%e2%80%a6/>
or <http://it.slashdot.org/article.pl?sid=07/09/11/1730258>.

Cheers,

Alexander Skwar

PS: *LOL* My signature is random. I _swear_ :)
-- 
Simon: "I swear - when it's appropriate."
Kaylee: "Simon, the whole point of swearing is that it ain't appropriate."

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Re: Re: [gentoo]Block certain websites

[Alan McKinnon]

On Sunday 16 September 2007, Alexander Skwar wrote:
> One important thing to note, though. It's important to remember
> that the proxy operator could easily sniff all the traffic that's
> going through the proxy. The proxy needs to be able to read the
> traffic.

Thanks :-)

I don't need to use your proxy though but it is nice to have an one 
available in meetings with some half-wit admins who insist they can 
block anything/anytime/anywhere. When that happens I can never 
remember/find one fast enough to have the full devastating impact that 
I seek....

alan


-- 
Optimists say the glass is half full,
Pessimists say the glass is half empty,
Developers say wtf is the glass twice as big as it needs to be?

Alan McKinnon
alan at linuxholdings dot co dot za
+27 82, double three seven, one nine three five
-- 
gentoo-user@gentoo.org mailing list

[ot] Re: [gentoo-user] Re: Re: [gentoo]Block certain websites

[Arturo 'Buanzo' Busleiman]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Alan McKinnon wrote:
> I don't need to use your proxy though but it is nice to have an one 
> available in meetings with some half-wit admins who insist they can 
> block anything/anytime/anywhere. When that happens I can never 
> remember/find one fast enough to have the full devastating impact that 
> I seek....

The other day something quite funny happened to me. I was with my Laptop trying to find an open AP.
I found one, but couldn't browser the internet nor get my OpenVPN (against a USA-based server) up
and running. I started making some tests... and I finally tried sshing into one of my local (i.e in
argentina) servers.

It worked. So, they were filtering (or the internet link didn't have) international access. I
quickly set-up an openvpn server on the argentinian (i.e national) server, a 3proxy-proxy (fast
enough), and told firefox to use it (over the vpn). Quite funny :)

- --
Arturo "Buanzo" Busleiman - Consultor Independiente en Seguridad Informatica
Servicios Ofrecidos: http://www.buanzo.com.ar/pro/
Unase a los Foros GNU/Buanzo - La palabra Comunidad en su maxima expresion.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFG7UlqAlpOsGhXcE0RCo8uAJkBRkqAjLtPTa9gIgJwTHtV//wRdQCfWq5q
gsEqVOuUlXA/2MuXm4sxe94=
=hRu+
-----END PGP SIGNATURE-----
-- 
gentoo-user@gentoo.org mailing list

Re: [ot] Re: [gentoo-user] Re: Re: [gentoo]Block certain websites

[Hans-Werner Hilse]

Hi,

On Sun, 16 Sep 2007 12:19:06 -0300
"Arturo 'Buanzo' Busleiman" <buanzo@buanzo.com.ar> wrote:

> The other day something quite funny happened to me. I was with my Laptop trying to find an open AP.
> I found one, but couldn't browser the internet nor get my OpenVPN (against a USA-based server) up
> and running. I started making some tests... and I finally tried sshing into one of my local (i.e in
> argentina) servers.
> 
> It worked. So, they were filtering (or the internet link didn't have) international access. I
> quickly set-up an openvpn server on the argentinian (i.e national) server, a 3proxy-proxy (fast
> enough), and told firefox to use it (over the vpn). Quite funny :)

I just use ssh for this. Using the "-D" flag gives a SOCKS5 proxy,
listening locally, making/accepting connections on the ssh remote end.
You can use it directly in Firefox, no need for full-fledged VPN.
(and for that, there would be the new "-w" option -- when IP-via-TCP is
an option)

-hwh
-- 
gentoo-user@gentoo.org mailing list

Re: [ot] Re: [gentoo-user] Re: Re: [gentoo]Block certain websites

[Arturo 'Buanzo' Busleiman]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hans-Werner Hilse wrote:
> I just use ssh for this. Using the "-D" flag gives a SOCKS5 proxy,
> listening locally, making/accepting connections on the ssh remote end.
> You can use it directly in Firefox, no need for full-fledged VPN.
> (and for that, there would be the new "-w" option -- when IP-via-TCP is
> an option)

Yes, ssh is usually my choice for one-time tunnels, but I took the opportunity to setup a
full-fledged VPN against this national server, just in case I needed anything else :)

In any case, (quote form man ssh here) "Since an SSH-based setup entails a fair amount of overhead,
it may be more suited to temporary setups, such as for wireless VPNs.  More permanent VPNs are
better provided by tools such as ipsecctl(8) and isakmpd(8).".

- --
Arturo "Buanzo" Busleiman - Consultor Independiente en Seguridad Informatica
Servicios Ofrecidos: http://www.buanzo.com.ar/pro/
Unase a los Foros GNU/Buanzo - La palabra Comunidad en su maxima expresion.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFG7ZhSAlpOsGhXcE0RCuAtAJ0coPxWG6Vo803NKne6DNrsaKcpyACfavLU
k3+FEhsG930qw0QMttmouno=
=CyLg
-----END PGP SIGNATURE-----
-- 
gentoo-user@gentoo.org mailing list