+ Post New Thread
Page 1 of 5 12345 LastLast
Results 1 to 15 of 63
London Grid for Learning (LGfL) Thread, The children at YOUR SCHOOL can access porn images under the LGFL filtering... in Regional Broadband Consortiums (RBC); Hi all, This is more a informative post rather than a question or query to LGFL. For the past 2 ...
  1. #1

    Join Date
    May 2012
    Location
    Location
    Posts
    81
    Thank Post
    17
    Thanked 7 Times in 6 Posts
    Rep Power
    6

    The children at YOUR SCHOOL can access porn images under the LGFL filtering...

    Hi all,

    This is more a informative post rather than a question or query to LGFL.

    For the past 2 months now I have been battling with LGFL over 'raise an issue' about our kids being able to access porn under the LGFL filtering.

    Now you may think that your school is completely safe, for your own piece of mind do the following test (obviously under student filtering, in an environment of which kids cant see your screen)

    Go to google images, and search 'computers' in the normal search an let google display the results, now click images. Once google has displayed the images type in something 15 year old boys would think of 'Girls naked'. Now at this point google will step in with THEIR filtering, not displaying the images. Now if you click sign in, at the top right, Once signed in you can remove the google filtering and watch as the NSFW images roll in. (Obviously some images wont display because of the website they are being pulled from is indeed blocked, but scroll through some pages..)

    Solution to the above is block the URL that google is producing when you click sign in, perfectly fine, but what about the other 2,000,000,000,000 search engines with little to no safe search filtering.

    We also found that going to other search engines, we could type in the word PORN, yes as blatant as PORN and with the relaxed filtering display over 900 pages of XXX images, remember that this could be done at ANY primary school / secondary under the LGFL filtering.

    Please do some tests for yourself.

    As mentioned above we have had a case open for almost 2 months now, and LGFL are chucking us round in circles. We have had the same low level support engineer for the past 2 months, and we are getting nowhere. Apparently the 'developers' are going to get involved. Hmm.

    So I pose to you, is this because they don’t have a clue about the problem, or is it because they know they have a major issue, and are telling this 'smaller techies' to just 'fob us off' whilst they hide???
    Last edited by RJohnson91; 26th November 2012 at 08:43 AM.

  2. 2 Thanks to RJohnson91:

    rad (18th December 2012), speckytecky (17th December 2012)

  3. #2

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    9,060
    Thank Post
    591
    Thanked 1,945 Times in 1,345 Posts
    Blog Entries
    19
    Rep Power
    813
    Quote Originally Posted by RJohnson91 View Post
    So I pose to you, is this because they don’t have a clue about the problem, or is it because they know they have a major issue, and are telling this 'smaller techies' to just 'fob us off' whilst they hide???
    C: All of the above.

    They probably know about it, but are stumped as to what they can do to fix it. [I'm assuming something as seemingly simple as blocking the login page isn't simple in practice.]

  4. #3

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,212 Times in 761 Posts
    Rep Power
    394
    Basically this is because Google has for some time enabled secure search (and only secure search) for any logged in user. If your filtering does not combat Google secure search, all of Google search is available.

    If you control your own DNS server, you may be able to combat this locally by adding your own DNS record to resolve www.google.co.uk to nosslsearch.google.com (substitute your local country suffix as appropriate, i.e. whichever one the geographic IP detection redirects you to). Google suggest using a CNAME record, but there are issues with this on Windows servers, so you may have to resort to an A record and make sure to update it when the IP chnages (not often, but does happen).
    Last edited by AngryTechnician; 26th November 2012 at 09:18 AM.

  5. #4

    elsiegee40's Avatar
    Join Date
    Jan 2007
    Location
    Kent
    Posts
    10,716
    Thank Post
    1,784
    Thanked 2,170 Times in 1,605 Posts
    Rep Power
    770
    Do your students have mandatory profiles? If you set up the mandatory profile with strict safe search on, it will at least be reset to strict every time the student logs on. It doesn't stop them turning strict safe search off, but it does help!

  6. #5

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,084
    Thank Post
    853
    Thanked 2,679 Times in 2,272 Posts
    Blog Entries
    9
    Rep Power
    769
    Quote Originally Posted by AngryTechnician View Post
    Basically this is because Google has for some time enabled secure search (and only secure search) for any logged in user. If your filtering does not combat Google secure search, all of Google search is available.

    If you control your own DNS server, you may be able to combat this locally by adding your own DNS record to resolve Google to nosslsearch.google.com (substitute your local country suffix as appropriate, i.e. whichever one the geographic IP detection redirects you to). Google suggest using a CNAME record, but there are issues with this on Windows servers, so you may have to resort to an A record and make sure to update it when the IP chnages (not often, but does happen).
    Love the irony, the 'issues' are caused by the fact the Windows follows the standards in order to protect users from potentially malicious actions.

    If your using TMG you can use SSL inspection and rewrite safe search to on all the time, I think smoothwall does this too.
    Last edited by SYNACK; 26th November 2012 at 09:22 AM.

  7. #6
    chazzy2501's Avatar
    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,781
    Thank Post
    213
    Thanked 263 Times in 213 Posts
    Rep Power
    67
    You may notice that the search filtering only applies in english (isp and google). Pupils here can type boobs, porn in spanish or french in the co.uk google and get all kinds of thing up

  8. #7

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    No filtering system is perfect, no matter what technical measures you implement to block content there is always a way around it.

  9. #8
    chazzy2501's Avatar
    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,781
    Thank Post
    213
    Thanked 263 Times in 213 Posts
    Rep Power
    67
    oh the most shocking website to get through our filter (and you should check it too) meatspin.com.. just block it don't go there trust me. I was shocked!

  10. #9

    Join Date
    Apr 2012
    Location
    Leeds
    Posts
    297
    Thank Post
    0
    Thanked 63 Times in 51 Posts
    Rep Power
    35
    Have you any idea what kind of filtering LGFL uses? I must admit that sounds pretty bad.....

    Many types of firewall can enforce google safesearch (and other search engines equivalent) even if the user logs in and turns it off), Fortinet, Smoothwall etc all do this.

    Perhaps to get around the poor filtering you should consider putting another device onsite? I know our Fortinets can work in transparent mode so you don't even have to do any network reconfigurations. Not sure about Smoothwall, best ask @TomNewton

    Thanks

    Dave

  11. #10

    Join Date
    Jan 2008
    Posts
    148
    Thank Post
    12
    Thanked 27 Times in 25 Posts
    Rep Power
    20
    Won't don't you add this to the filtering solution and select to ban them all.
    *.google.*/*safe=off*
    *.google.*/advanced_image_search*
    *.google.*/advanced_search*
    *.google.*/preferences*

    Yes it is over kill to do this. We use censornet and are an LGFL school. Censornet allows us to force the use of google safe search.

  12. #11

    synaesthesia's Avatar
    Join Date
    Jan 2009
    Location
    Northamptonshire
    Posts
    5,887
    Thank Post
    575
    Thanked 1,001 Times in 773 Posts
    Blog Entries
    15
    Rep Power
    461
    @SchoolsBroadband : fortinet ignores safesearch for as long as it's used in HTTPS mode. Just trying to work around it now.

  13. #12

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,212 Times in 761 Posts
    Rep Power
    394
    Quote Originally Posted by chris_uk View Post
    We use censornet and are an LGFL school. Censornet allows us to force the use of google safe search.
    Forcing Safe Search only works if your filter does HTTPS decryption. If the traffic remains encrypted, all the filter will see is the domain name, so it can't filter by anything after the / or do any content or request rewriting.

  14. #13

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,730
    Thank Post
    698
    Thanked 1,212 Times in 761 Posts
    Rep Power
    394
    Quote Originally Posted by chazzy2501 View Post
    You may notice that the search filtering only applies in english (isp and google). Pupils here can type boobs, porn in spanish or french in the co.uk google and get all kinds of thing up
    Just tried this out (purely in the name of research).

    Safe Search blocks 'boobs' in Spanish, while 'porn' was blocked by Smoothwall in both Spanish and French. Both Smoothwall and Safe Search did let through 'boobs' in French, but the results were still filtered and were relatively tame. I tried a few other terms in a variety of languages, and between Smoothwall and Safe Search they did a pretty good job of keeping things tame.

    Again, all of this can be bypassed if your filter is letting through encrypted search.

  15. #14

    Join Date
    May 2012
    Location
    Location
    Posts
    81
    Thank Post
    17
    Thanked 7 Times in 6 Posts
    Rep Power
    6
    Wow loads of replies!

    I know that each filtering has its flaws but this seems to be a little silly, I knew that not all sites would be blocked of course not, however considering the nature of the institute, being a school with young children. I thought that 'porn' wouldn't be able to slip through.

    But any how, I think running an on site firewall is going to be the only option, we have discussed 'smoothwall' as apparently it is quite good, as LGFL's system doesn't seem to be working. I have tried to block those google URL extensions, and to no prevail. But I have been given and assured by LGFL that a new keyword block of '/tbm=isch/' will stop the use of google images, but only google images, and they want us to ask for a re-cat when we find a new search engine.

    So what im going to do this weekend is type 'search engine' into google, and write down each and every one (About 1,230,000,000 results <- Actual results) and then ask for a re-cat to block every one, thats my weekend sorted... Anyone fancy joining me?

    As for that 'meat' website, I wont look as i dont want to 'kill the cat', l'll just block. Thanks for the heads up.

    Maybe we should start a post titled 'Websites to block' and everyone post URLs, get a complete list? Apparently there is one, which is good!

    Ryan
    Last edited by RJohnson91; 26th November 2012 at 12:56 PM.

  16. #15

    Edu-IT's Avatar
    Join Date
    Nov 2007
    Posts
    7,121
    Thank Post
    403
    Thanked 619 Times in 566 Posts
    Rep Power
    180
    Maybe we should start a post titled 'Websites to block' and everyone post URLs, get a complete list?
    There's one already, do a quick search.

SHARE:
+ Post New Thread
Page 1 of 5 12345 LastLast

Similar Threads

  1. Do PGCE students at your school get laptops?
    By maniac in forum How do you do....it?
    Replies: 17
    Last Post: 9th December 2009, 06:56 AM
  2. How many ICT Technicians at your School???
    By Nick_Young in forum General Chat
    Replies: 41
    Last Post: 28th April 2009, 03:47 PM
  3. Will you be using Vista at your school?
    By dhassen in forum Windows Vista
    Replies: 25
    Last Post: 21st November 2008, 10:42 PM
  4. How are the rest of your schools connected?
    By Dos_Box in forum General Chat
    Replies: 24
    Last Post: 8th August 2005, 10:42 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •