+ Post New Thread
Page 1 of 5 12345 LastLast
Results 1 to 15 of 63
London Grid for Learning (LGfL) Thread, The children at YOUR SCHOOL can access porn images under the LGFL filtering... in Regional Broadband Consortiums (RBC); Hi all, This is more a informative post rather than a question or query to LGFL. For the past 2 ...
  1. #1

    Join Date
    May 2012
    Location
    Location
    Posts
    79
    Thank Post
    17
    Thanked 7 Times in 6 Posts
    Rep Power
    5

    The children at YOUR SCHOOL can access porn images under the LGFL filtering...

    Hi all,

    This is more a informative post rather than a question or query to LGFL.

    For the past 2 months now I have been battling with LGFL over 'raise an issue' about our kids being able to access porn under the LGFL filtering.

    Now you may think that your school is completely safe, for your own piece of mind do the following test (obviously under student filtering, in an environment of which kids cant see your screen)

    Go to google images, and search 'computers' in the normal search an let google display the results, now click images. Once google has displayed the images type in something 15 year old boys would think of 'Girls naked'. Now at this point google will step in with THEIR filtering, not displaying the images. Now if you click sign in, at the top right, Once signed in you can remove the google filtering and watch as the NSFW images roll in. (Obviously some images wont display because of the website they are being pulled from is indeed blocked, but scroll through some pages..)

    Solution to the above is block the URL that google is producing when you click sign in, perfectly fine, but what about the other 2,000,000,000,000 search engines with little to no safe search filtering.

    We also found that going to other search engines, we could type in the word PORN, yes as blatant as PORN and with the relaxed filtering display over 900 pages of XXX images, remember that this could be done at ANY primary school / secondary under the LGFL filtering.

    Please do some tests for yourself.

    As mentioned above we have had a case open for almost 2 months now, and LGFL are chucking us round in circles. We have had the same low level support engineer for the past 2 months, and we are getting nowhere. Apparently the 'developers' are going to get involved. Hmm.

    So I pose to you, is this because they don’t have a clue about the problem, or is it because they know they have a major issue, and are telling this 'smaller techies' to just 'fob us off' whilst they hide???
    Last edited by RJohnson91; 26th November 2012 at 08:43 AM.

  2. 2 Thanks to RJohnson91:

    rad (18th December 2012), speckytecky (17th December 2012)

  3. #2

    X-13's Avatar
    Join Date
    Jan 2011
    Location
    /dev/null
    Posts
    8,004
    Thank Post
    508
    Thanked 1,591 Times in 1,122 Posts
    Blog Entries
    19
    Rep Power
    700
    Quote Originally Posted by RJohnson91 View Post
    So I pose to you, is this because they don’t have a clue about the problem, or is it because they know they have a major issue, and are telling this 'smaller techies' to just 'fob us off' whilst they hide???
    C: All of the above.

    They probably know about it, but are stumped as to what they can do to fix it. [I'm assuming something as seemingly simple as blocking the login page isn't simple in practice.]

  4. #3

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,724
    Thank Post
    695
    Thanked 1,206 Times in 759 Posts
    Rep Power
    393
    Basically this is because Google has for some time enabled secure search (and only secure search) for any logged in user. If your filtering does not combat Google secure search, all of Google search is available.

    If you control your own DNS server, you may be able to combat this locally by adding your own DNS record to resolve www.google.co.uk to nosslsearch.google.com (substitute your local country suffix as appropriate, i.e. whichever one the geographic IP detection redirects you to). Google suggest using a CNAME record, but there are issues with this on Windows servers, so you may have to resort to an A record and make sure to update it when the IP chnages (not often, but does happen).
    Last edited by AngryTechnician; 26th November 2012 at 09:18 AM.

  5. #4

    elsiegee40's Avatar
    Join Date
    Jan 2007
    Location
    Kent
    Posts
    10,052
    Thank Post
    1,681
    Thanked 2,021 Times in 1,495 Posts
    Rep Power
    673
    Do your students have mandatory profiles? If you set up the mandatory profile with strict safe search on, it will at least be reset to strict every time the student logs on. It doesn't stop them turning strict safe search off, but it does help!

  6. #5

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,691
    Thank Post
    824
    Thanked 2,570 Times in 2,187 Posts
    Blog Entries
    9
    Rep Power
    731
    Quote Originally Posted by AngryTechnician View Post
    Basically this is because Google has for some time enabled secure search (and only secure search) for any logged in user. If your filtering does not combat Google secure search, all of Google search is available.

    If you control your own DNS server, you may be able to combat this locally by adding your own DNS record to resolve Google to nosslsearch.google.com (substitute your local country suffix as appropriate, i.e. whichever one the geographic IP detection redirects you to). Google suggest using a CNAME record, but there are issues with this on Windows servers, so you may have to resort to an A record and make sure to update it when the IP chnages (not often, but does happen).
    Love the irony, the 'issues' are caused by the fact the Windows follows the standards in order to protect users from potentially malicious actions.

    If your using TMG you can use SSL inspection and rewrite safe search to on all the time, I think smoothwall does this too.
    Last edited by SYNACK; 26th November 2012 at 09:22 AM.

  7. #6
    chazzy2501's Avatar
    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,723
    Thank Post
    206
    Thanked 254 Times in 206 Posts
    Rep Power
    65
    You may notice that the search filtering only applies in english (isp and google). Pupils here can type boobs, porn in spanish or french in the co.uk google and get all kinds of thing up

  8. #7

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,800
    Thank Post
    110
    Thanked 582 Times in 503 Posts
    Blog Entries
    1
    Rep Power
    223
    No filtering system is perfect, no matter what technical measures you implement to block content there is always a way around it.

  9. #8
    chazzy2501's Avatar
    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,723
    Thank Post
    206
    Thanked 254 Times in 206 Posts
    Rep Power
    65
    oh the most shocking website to get through our filter (and you should check it too) meatspin.com.. just block it don't go there trust me. I was shocked!

  10. #9

    Join Date
    Apr 2012
    Location
    Leeds
    Posts
    265
    Thank Post
    0
    Thanked 51 Times in 43 Posts
    Rep Power
    33
    Have you any idea what kind of filtering LGFL uses? I must admit that sounds pretty bad.....

    Many types of firewall can enforce google safesearch (and other search engines equivalent) even if the user logs in and turns it off), Fortinet, Smoothwall etc all do this.

    Perhaps to get around the poor filtering you should consider putting another device onsite? I know our Fortinets can work in transparent mode so you don't even have to do any network reconfigurations. Not sure about Smoothwall, best ask @TomNewton

    Thanks

    Dave

  11. #10

    Join Date
    Jan 2008
    Posts
    144
    Thank Post
    12
    Thanked 27 Times in 25 Posts
    Rep Power
    19
    Won't don't you add this to the filtering solution and select to ban them all.
    *.google.*/*safe=off*
    *.google.*/advanced_image_search*
    *.google.*/advanced_search*
    *.google.*/preferences*

    Yes it is over kill to do this. We use censornet and are an LGFL school. Censornet allows us to force the use of google safe search.

  12. #11

    synaesthesia's Avatar
    Join Date
    Jan 2009
    Location
    Northamptonshire
    Posts
    5,486
    Thank Post
    527
    Thanked 876 Times in 683 Posts
    Blog Entries
    15
    Rep Power
    438
    @SchoolsBroadband : fortinet ignores safesearch for as long as it's used in HTTPS mode. Just trying to work around it now.

  13. #12

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,724
    Thank Post
    695
    Thanked 1,206 Times in 759 Posts
    Rep Power
    393
    Quote Originally Posted by chris_uk View Post
    We use censornet and are an LGFL school. Censornet allows us to force the use of google safe search.
    Forcing Safe Search only works if your filter does HTTPS decryption. If the traffic remains encrypted, all the filter will see is the domain name, so it can't filter by anything after the / or do any content or request rewriting.

  14. #13

    AngryTechnician's Avatar
    Join Date
    Oct 2008
    Posts
    3,724
    Thank Post
    695
    Thanked 1,206 Times in 759 Posts
    Rep Power
    393
    Quote Originally Posted by chazzy2501 View Post
    You may notice that the search filtering only applies in english (isp and google). Pupils here can type boobs, porn in spanish or french in the co.uk google and get all kinds of thing up
    Just tried this out (purely in the name of research).

    Safe Search blocks 'boobs' in Spanish, while 'porn' was blocked by Smoothwall in both Spanish and French. Both Smoothwall and Safe Search did let through 'boobs' in French, but the results were still filtered and were relatively tame. I tried a few other terms in a variety of languages, and between Smoothwall and Safe Search they did a pretty good job of keeping things tame.

    Again, all of this can be bypassed if your filter is letting through encrypted search.

  15. #14

    Join Date
    May 2012
    Location
    Location
    Posts
    79
    Thank Post
    17
    Thanked 7 Times in 6 Posts
    Rep Power
    5
    Wow loads of replies!

    I know that each filtering has its flaws but this seems to be a little silly, I knew that not all sites would be blocked of course not, however considering the nature of the institute, being a school with young children. I thought that 'porn' wouldn't be able to slip through.

    But any how, I think running an on site firewall is going to be the only option, we have discussed 'smoothwall' as apparently it is quite good, as LGFL's system doesn't seem to be working. I have tried to block those google URL extensions, and to no prevail. But I have been given and assured by LGFL that a new keyword block of '/tbm=isch/' will stop the use of google images, but only google images, and they want us to ask for a re-cat when we find a new search engine.

    So what im going to do this weekend is type 'search engine' into google, and write down each and every one (About 1,230,000,000 results <- Actual results) and then ask for a re-cat to block every one, thats my weekend sorted... Anyone fancy joining me?

    As for that 'meat' website, I wont look as i dont want to 'kill the cat', l'll just block. Thanks for the heads up.

    Maybe we should start a post titled 'Websites to block' and everyone post URLs, get a complete list? Apparently there is one, which is good!

    Ryan
    Last edited by RJohnson91; 26th November 2012 at 12:56 PM.

  16. #15

    Edu-IT's Avatar
    Join Date
    Nov 2007
    Posts
    6,875
    Thank Post
    393
    Thanked 581 Times in 532 Posts
    Rep Power
    173
    Maybe we should start a post titled 'Websites to block' and everyone post URLs, get a complete list?
    There's one already, do a quick search.

SHARE:
+ Post New Thread
Page 1 of 5 12345 LastLast

Similar Threads

  1. Do PGCE students at your school get laptops?
    By maniac in forum How do you do....it?
    Replies: 17
    Last Post: 9th December 2009, 06:56 AM
  2. How many ICT Technicians at your School???
    By Nick_Young in forum General Chat
    Replies: 41
    Last Post: 28th April 2009, 03:47 PM
  3. Will you be using Vista at your school?
    By dhassen in forum Windows Vista
    Replies: 25
    Last Post: 21st November 2008, 10:42 PM
  4. How are the rest of your schools connected?
    By Dos_Box in forum General Chat
    Replies: 24
    Last Post: 8th August 2005, 10:42 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •