Howto display an internet policy

[MarkB]

I have just managed to set up a local proxy server with Dansguardian and NTLM. What I want to try to do now is set it up so that when a student tries to access the web for the first time in a day/week/month (need to decide the timing) they are redirected to a page containing a usage policy and an agree button that will send them to the original site.

I am running on Fedora Core 6, Squid 2.6.STABLE4 and Dansguardian 2.9.8.1.

Clients connect like so;

Client -> Dansguardian -> Squid -> LEA's Proxy -> Internet.

Any suggestions?

[Stefletch]

We set up the internet policy on the homepage that students are forced to goto when first opening Internet Explorer. It's simply a case of using Group Policy. Doesn't do exactly what you want but miles easier.

[Geoff]

You need to use something called a Captive portal. These are normally used for public WiFi (agreeing to the ToS before surfing off). However you should be able to adapt one to your situation.

The wikipedia page lists lots of possible software options.

http://en.wikipedia.org/wiki/Captive_portal

[MarkB]

Thanks for the suggestions, I got home and suddenly realised that Dansguardian can do this for me, it is a bit of a kludge and I haven't tested it yet but it should work.

Basically you set the default filter list group to be a blanket block (so no internet access) and have it so that it displays a php page on the proxy (instead of the html template) that displays the policy with an agree link that when clicked the script adds that user name to the normal student access filter group and gets dansguardian to reload the groups, then redirects the user to the requested page. Then just have a cron job that runs daily/weekly/whenever that clears the filter group list (so everyone goes into the default filter group).

[mitcheln]

script adds that user name to the normal student access filter group and gets dansguardian to reload the groups

I'd be really interested to hear how your testing goes.

When you say "reload the groups" do you mean restart dansguardian? My dansguardian can take a few moments to restart which suspends things for those moments, which might result in patchy access elsewhere as a whole bunch of users force the process to restart.

Ta.

[mattx]

I wrote this quick script for a school about 18 months ago. All it does is display the disclaimer before a child can fire off IE. You just need to point your browser shortcut to this script. You can compile it to a EXE if you download the rest of the language package. Its free and at:

http://www.hiddensoft.com/

One of the best free scripting languages out there.....
Anyway - code as follows. Feel free to edit and change as requried:

; AutoIt Version: 2.64
; Language: English
; Platform: WinXP
; Author: Matt Marsh
; Date: 13th Nov 2004
; Script Function: Internet Policy For A N OTHER SCHOOL

;Relevant policy user has to click on before fireing up IE

$__msgbox = MsgBox(4, 'SCHOOL CODE OF CONDUCT FOR USE OF THE SCHOOL NETWORK & THE INTERNET', _
'This simplified code of conduct applies at all times, in and out of school hours, whilst using school equipment.' & @CRLF & _
'Please read it carefully.' & @CRLF & _
@CRLF & _
'You should:' & @CRLF & _
@CRLF & _
'* Only access websites that are appropriate for use in school.' & @CRLF & _
'* Be careful of what you say to others and how you say it.' & @CRLF & _
'* Respect copyright and trademarks. (You cannot copy material' & @CRLF & _
'without giving credit to the person or company that owns it.)' & @CRLF & _
'* Check with a teacher before opening email attachments or' & @CRLF & _
'completing on-line questionnaires or subscription forms.' & @CRLF & _
@CRLF & _
'You must not:' & @CRLF & _
@CRLF & _
'* Download games or other programs from the Internet.' & @CRLF & _
'* Use chatlines or web-based email services (e.g Hotmail).' & @CRLF & _
'* Send, access or display offensive messages or pictures.' & @CRLF & _
'* Give your name, address, telephone number or any other personal' & @CRLF & _
'information about yourself or others to anyone you write to.' & @CRLF & _
'* Use or send bad language.' & @CRLF & _
'* Intentionally waste resources thus preventing use by others.' & @CRLF & _
@CRLF & _
'Please note:' & @CRLF & _
'* User areas on the school network will be closely monitored and' & @CRLF & _
'staff may review your files and communications to maintain' & @CRLF & _
'system integrity.' & @CRLF & _
'* Failure to follow the code will result in loss of access and further' & @CRLF & _
'disciplinary action may be taken if appropriate.' & @CRLF & _
'* If applicable, external agencies may be involved, as certain' & @CRLF & _
'activities may constitute a criminal offence.' & @CRLF & _
@CRLF & _
'If you are willing to accept these terms and conditions, click yes to continue.')

if ($__msgbox = 7) Then
Exit
EndIf
if ($__msgbox = 6) Then
Run('c:\program files\internet Explorer\iexplore.exe')
EndIf
Exit