From owner-freebsd-questions Thu Feb 13 15: 6:26 2003 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 658B237B401 for ; Thu, 13 Feb 2003 15:06:24 -0800 (PST) Received: from devil.stderror.at (at00d01-adsl-194-118-044-149.nextranet.at [194.118.44.149]) by mx1.FreeBSD.org (Postfix) with ESMTP id E9EED43F75 for ; Thu, 13 Feb 2003 15:06:22 -0800 (PST) (envelope-from pinhead@stderror.at) Received: by devil.stderror.at (Postfix, from userid 1000) id DD97915310; Fri, 14 Feb 2003 00:06:20 +0100 (CET) Date: Fri, 14 Feb 2003 00:06:20 +0100 From: Toni Schmidbauer To: freebsd-questions@freebsd.org Subject: Re: internet browser filter Message-ID: <20030213230620.GC16395@devil.stderror.at> Reply-To: toni@stderror.at Mail-Followup-To: freebsd-questions@freebsd.org References: <002601c2d3a1$91fc4660$05040101@socrates> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="bKyqfOwhbdpXa4YI" Content-Disposition: inline In-Reply-To: <002601c2d3a1$91fc4660$05040101@socrates> User-Agent: Mutt/1.4i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG --bKyqfOwhbdpXa4YI Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Feb 13, 2003 at 02:50:39PM -0600, charles pelletier wrote: > i already use IP filter for firewall protection, but, I am about to > implement a freebsd based network in my computer lab at the school. polic= ies > state that there must be some sort of web filter in between the user and = the > WWW. is there an easy solution out there? i, of course, want nothing to do > with Windows for this. you could use squid (http://www.squid.org). its also in the ports collection. with squid you can do url filtering via acl's.=20 squid also works perfectly well with commerical web-filters, like smartfilter (http://www.securecomputing.com/index.cfm?skey=3D85). for seamless integration into your network configure squid + ipfilter as an transparent proxy. you have to redirect port 80 on your firewall to the port squid listens on (see http://www.squid-cache.org/Doc/FAQ/FAQ-17.html). toni --=20 Terror ist der Krieg der Armen, | toni@stderror.at Krieg ist der Terror der Reichen. | Toni Schmidbauer - Sir Peter Ustinov | --bKyqfOwhbdpXa4YI Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (FreeBSD) iD8DBQE+TCTru/mjSj7RMocRAt8oAJ49loR8mf4WReBuzOtyr3rht5dS7ACfcaPI dQBm8fNNaZszneJyxh9HUHk= =0ecC -----END PGP SIGNATURE----- --bKyqfOwhbdpXa4YI-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message