[gentoo-user] Office web filtering

[gentoo-user] Office web filtering

[Stroller]

Hi there,

Anyone got any suggestions regarding web filtering for a small office  
of a dozen employees?

I'd assume Squid + Google-it-you-lazy-git, but there are a couple of  
requirements that make my request a little unusual.

Firstly, instead of simply blocking pr0n & allowing everything else,  
the site primarily wants to block Hotmail & Facebook.

I assume that what this _really means_ is that they want to block  
everything by default and add a whitelist of work-related sites (it's  
an estate agent, so http://rightmove.co.uk would be on the whitelist,  
for instance).

Secondly, they want to perform the blocking for most of the day, but  
relax the restrictions between 11am - 11:15am & 1pm - 2pm.

And thirdly, the bosses want to be excluded from the filtering. One  
obvious way to do this is filtering by their MAC or IP address - none  
of the staff are geek enough to get around this but nevertheless it's  
a bit clumsy & requires maintenance if the boss gets a new laptop.

So what I'd prefer is really some kind of system that pops up a  
message "this site cannot be displayed because it is in the filter  
category [pr0n|frivolous]; if you would like to see it anyway, please  
enter your username & password". I used to work at a place that  
displayed a similar message & allowed with a single click a user to  
submit to the admin websites that had been blacklisted in error; so I  
am sure something like this is possible, I just don't know if it's  
available in open-source.

Thanks in advance,

Stroller.

Re: [gentoo-user] Office web filtering

[Florian Philipp]

Stroller schrieb:
> Hi there,
> 
> Anyone got any suggestions regarding web filtering for a small office of
> a dozen employees?
> 
[...]
> So what I'd prefer is really some kind of system that pops up a message
> "this site cannot be displayed because it is in the filter category
> [pr0n|frivolous]; if you would like to see it anyway, please enter your
> username & password". I used to work at a place that displayed a similar
> message & allowed with a single click a user to submit to the admin
> websites that had been blacklisted in error; so I am sure something like
> this is possible, I just don't know if it's available in open-source.
> 
DansGuardian (in portage) offers user authentication via NTLM and other
mechanisms [1]. I assume it also offers all the other features you want
although I never used it.

[1]
http://contentfilter.futuragts.com/wiki/doku.php?id=user_identification_methods

Re: [gentoo-user] Office web filtering

[Stroller]

On 8 Nov 2008, at 20:00, Florian Philipp wrote:
> Stroller schrieb:
>> ...
>> Anyone got any suggestions regarding web filtering for a small  
>> office of
>> a dozen employees?
>>
> [...]
>> So what I'd prefer is really some kind of system that pops up a  
>> message
>> "this site cannot be displayed because it is in the filter category
>> [pr0n|frivolous]; if you would like to see it anyway, please enter  
>> your
>> username & password". I used to work at a place that displayed a  
>> similar
>> message & allowed with a single click a user to submit to the admin
>> websites that had been blacklisted in error; so I am sure something  
>> like
>> this is possible, I just don't know if it's available in open-source.
>>
> DansGuardian (in portage) offers user authentication via NTLM and  
> other
> mechanisms [1]. I assume it also offers all the other features you  
> want
> although I never used it.
>
> [1]
> http://contentfilter.futuragts.com/wiki/doku.php?id=user_identification_methods

This looks GREAT! Thanks!

It'll take me a day or two to have time to look at this properly,  
though, so in the meantime I'd still welcome for comparison purposes  
any other suggestions.

Stroller.

Re: [gentoo-user] Office web filtering

[Amar Cosic]

[-- Attachment #1: Type: text/plain, Size: 1767 bytes --]

On Sat, Nov 8, 2008 at 6:36 PM, Stroller <stroller@stellar.eclipse.co.uk>wrote:

> Hi there,
>
> Anyone got any suggestions regarding web filtering for a small office of a
> dozen employees?
>
> I'd assume Squid + Google-it-you-lazy-git, but there are a couple of
> requirements that make my request a little unusual.
>
> Firstly, instead of simply blocking pr0n & allowing everything else, the
> site primarily wants to block Hotmail & Facebook.
>
> I assume that what this _really means_ is that they want to block
> everything by default and add a whitelist of work-related sites (it's an
> estate agent, so http://rightmove.co.uk would be on the whitelist, for
> instance).
>
> Secondly, they want to perform the blocking for most of the day, but relax
> the restrictions between 11am - 11:15am & 1pm - 2pm.
>
> And thirdly, the bosses want to be excluded from the filtering. One obvious
> way to do this is filtering by their MAC or IP address - none of the staff
> are geek enough to get around this but nevertheless it's a bit clumsy &
> requires maintenance if the boss gets a new laptop.
>
> So what I'd prefer is really some kind of system that pops up a message
> "this site cannot be displayed because it is in the filter category
> [pr0n|frivolous]; if you would like to see it anyway, please enter your
> username & password". I used to work at a place that displayed a similar
> message & allowed with a single click a user to submit to the admin websites
> that had been blacklisted in error; so I am sure something like this is
> possible, I just don't know if it's available in open-source.
>
> Thanks in advance,
>
> Stroller.
>
>
>
I use opendns.com at work. HTH



-- 
Amar Ćosić
amar.cosic@gmail.com
amar@amar.ba
+38761240095
http://www.amar.ba

[-- Attachment #2: Type: text/html, Size: 2385 bytes --]

Re: [gentoo-user] Office web filtering

[Stroller]

On 8 Nov 2008, at 20:16, Amar Cosic wrote:
> On Sat, Nov 8, 2008 at 6:36 PM, Stroller <stroller@stellar.eclipse.co.uk 
> > wrote:
>> ...
>> So what I'd prefer is really some kind of system that pops up a  
>> message "this site cannot be displayed because it is in the filter  
>> category [pr0n|frivolous]; if you would like to see it anyway,  
>> please enter your username & password". I used to work at a place  
>> that displayed a similar message & allowed with a single click a  
>> user to submit to the admin websites that had been blacklisted in  
>> error; so I am sure something like this is possible, I just don't  
>> know if it's available in open-source.
>
> I use opendns.com at work. HTH

This doesn't easily fulfil the requirement to assign different  
browsing rights to different users (never mind the ones to filter non- 
porn sites or enable those sites at different times).

Thanks, though.

Stroller.

RE: [gentoo-user] Office web filtering

[Brett Freer]

Hi Stroller,

I have found www.opendns.com to be a really good solution. However, it
will be blanket cover for the whole lan and you won't be able to
implement the time-based, or the user-based exceptions.

Kind regards

Brett Freer 

-----Original Message-----
From: Stroller [mailto:stroller@stellar.eclipse.co.uk] 
Sent: Sunday, 9 November 2008 4:37 AM
To: gentoo-user@lists.gentoo.org
Subject: [gentoo-user] Office web filtering

Hi there,

Anyone got any suggestions regarding web filtering for a small office of
a dozen employees?

I'd assume Squid + Google-it-you-lazy-git, but there are a couple of
requirements that make my request a little unusual.

Firstly, instead of simply blocking pr0n & allowing everything else, the
site primarily wants to block Hotmail & Facebook.

I assume that what this _really means_ is that they want to block
everything by default and add a whitelist of work-related sites (it's an
estate agent, so http://rightmove.co.uk would be on the whitelist, for
instance).

Secondly, they want to perform the blocking for most of the day, but
relax the restrictions between 11am - 11:15am & 1pm - 2pm.

And thirdly, the bosses want to be excluded from the filtering. One
obvious way to do this is filtering by their MAC or IP address - none of
the staff are geek enough to get around this but nevertheless it's a bit
clumsy & requires maintenance if the boss gets a new laptop.

So what I'd prefer is really some kind of system that pops up a message
"this site cannot be displayed because it is in the filter category
[pr0n|frivolous]; if you would like to see it anyway, please enter your
username & password". I used to work at a place that displayed a similar
message & allowed with a single click a user to submit to the admin
websites that had been blacklisted in error; so I am sure something like
this is possible, I just don't know if it's available in open-source.

Thanks in advance,

Stroller.