+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 22
*nix Thread, Proxy with content filtering in Technical; I'm keep hitting a barrier with setting up a proxy server and I'm not sure where the barrier is. I've ...
  1. #1
    gwendes's Avatar
    Join Date
    Jan 2007
    Location
    London
    Posts
    1,495
    Thank Post
    161
    Thanked 30 Times in 29 Posts
    Rep Power
    26

    Proxy with content filtering

    I'm keep hitting a barrier with setting up a proxy server and I'm not sure where the barrier is. I've installed Ubuntu/Debian with squid and Dansguardian as well as (attempting) an installation of dedicated distros ClarkConnect and CensorNet.

    Hopefully someone can point out where it is that I am going wrong!

    I work in a training centre that is connected to the school (with a 1.2Gbps fibre) and I want to install a proxy on one of the old servers to see how effective they are at stopping my bandwidth being eaten up by flash games and chat sites. I cannot connect two NICs as I only have a single connection to the school.

    Ideally I would connect like this

    IT room <> proxy (squid + Dansguardian) <> switch and uplink to school

    With the installs I have done I get everything configured as per guides online, I get lovely 'It Works!' messages but the proxy seems unable to resolve any IP or connect me to a website.

    CensorNet says that it works with a single NIC but still demands two indentical cards and, when I ignore, it cannot create a swap partition...

    Am I just really unlucky or is what I'm trying to do just really stupid?

  2. #2
    contink's Avatar
    Join Date
    Jul 2006
    Location
    South Yorkshire
    Posts
    3,791
    Thank Post
    303
    Thanked 327 Times in 233 Posts
    Rep Power
    118

    Re: Proxy with content filtering

    I can't provide the answers on this particular blend you've got but I can say that I got the "Extended Defense Plus" Homebrew version of Smoothwall up and running and that includes dansguardian, and advanced proxy and more besides...

    Additionally it provides you with some options such as a blue (wireless) port, orange DMZ.. but in your case a simple 2 card NIC profile.

    One thing I'm a little confused about though.. you say you can't connect two NICs but I'd assume that you'd need two (one for Red (WAN facing) and one for Green (LAN facing) to make it all possible...

    If you're not putting the proxy inline doesn't that make it somewhat tricky to avoid someone bypassing it?

  3. #3
    gwendes's Avatar
    Join Date
    Jan 2007
    Location
    London
    Posts
    1,495
    Thank Post
    161
    Thanked 30 Times in 29 Posts
    Rep Power
    26

    Re: Proxy with content filtering

    The plan is to force all computers through the proxy, using it as the gateway, on a single NIC. If this isn't possible it explains all the trouble I've had!

  4. #4

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,272
    Thank Post
    614
    Thanked 1,567 Times in 1,407 Posts
    Rep Power
    412

    Re: Proxy with content filtering

    Censornet requires 2 nics to be in the box but it sets the 2 up as a bridge.

    We use smoothwall vorporate guardian 5 which is a single nic proxy and filter.

    Ben

  5. #5
    contink's Avatar
    Join Date
    Jul 2006
    Location
    South Yorkshire
    Posts
    3,791
    Thank Post
    303
    Thanked 327 Times in 233 Posts
    Rep Power
    118

    Re: Proxy with content filtering

    Quote Originally Posted by gwendes
    The plan is to force all computers through the proxy, using it as the gateway, on a single NIC. If this isn't possible it explains all the trouble I've had!
    Well I don't know about the other systems but I'm sure you can't do it with smoothwall. However that's primarily a firewall product so it would make sense.

    I could make some half assed suggestions at this point but I'd be guessing so I'll bow out and let those with the knowledge take over.

    Right now though it does sound like the single NIC approach is part of your problem

  6. #6
    gwendes's Avatar
    Join Date
    Jan 2007
    Location
    London
    Posts
    1,495
    Thank Post
    161
    Thanked 30 Times in 29 Posts
    Rep Power
    26

    Re: Proxy with content filtering

    Quote Originally Posted by plexer
    Censornet requires 2 nics to be in the box but it sets the 2 up as a bridge.

    We use smoothwall vorporate guardian 5 which is a single nic proxy and filter.

    Ben
    Do they need to be identical? Do both cards need to be connected to a switch?

  7. #7

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,272
    Thank Post
    614
    Thanked 1,567 Times in 1,407 Posts
    Rep Power
    412

    Re: Proxy with content filtering

    No once it's installed you just connect one of the cards to your switch.

    Ben

  8. #8

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,802
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Proxy with content filtering

    With the installs I have done I get everything configured as per guides online, I get lovely 'It Works!' messages but the proxy seems unable to resolve any IP or connect me to a website.
    It's either:

    1) Your proxies DNS server settings are incorrect.
    2) Your proxy isn't set to use your school/LEA proxy and this is required for internet access (eg, direct internet access is firewalled).

  9. #9
    marco84's Avatar
    Join Date
    Jul 2005
    Location
    Manchester
    Posts
    146
    Thank Post
    4
    Thanked 5 Times in 4 Posts
    Rep Power
    19

    Re: Proxy with content filtering

    It can be done with 1 NIC using squid & dansguardian. I assume the school already have their own proxy doing the web filtering. If so, just set up squid as a downstream proxy. forward all requests to the parent proxy.

  10. #10
    gwendes's Avatar
    Join Date
    Jan 2007
    Location
    London
    Posts
    1,495
    Thank Post
    161
    Thanked 30 Times in 29 Posts
    Rep Power
    26

    Re: Proxy with content filtering

    Quote Originally Posted by marco84
    It can be done with 1 NIC using squid & dansguardian. I assume the school already have their own proxy doing the web filtering. If so, just set up squid as a downstream proxy. forward all requests to the parent proxy.
    This is what I'm sure I've already setup - I'll start again (linux is so fast) with a fresh config file! Any recommendations on distro with squid / content filtering ready to go? I've tried Ubuntu-Debian and Mandriva - most comfortable with Debian

  11. #11
    marco84's Avatar
    Join Date
    Jul 2005
    Location
    Manchester
    Posts
    146
    Thank Post
    4
    Thanked 5 Times in 4 Posts
    Rep Power
    19

    Re: Proxy with content filtering

    Have you got webmin installed? Being new to linux too, i find it just makes things a bit easier when configuring squid.
    I know that using the webmin module to edit the squid.conf makes it alot easier (for me anyway) to add a parent cache.

  12. #12
    gwendes's Avatar
    Join Date
    Jan 2007
    Location
    London
    Posts
    1,495
    Thank Post
    161
    Thanked 30 Times in 29 Posts
    Rep Power
    26

    Re: Proxy with content filtering

    Quote Originally Posted by marco84
    Have you got webmin installed? Being new to linux too, i find it just makes things a bit easier when configuring squid.
    I know that using the webmin module to edit the squid.conf makes it alot easier (for me anyway) to add a parent cache.
    Thanks for the tip - I'd already found that webmin is best for me too - It's like Windows is engraved on my soul

    Wish me luck!

  13. #13
    marco84's Avatar
    Join Date
    Jul 2005
    Location
    Manchester
    Posts
    146
    Thank Post
    4
    Thanked 5 Times in 4 Posts
    Rep Power
    19

    Re: Proxy with content filtering

    Im looking at using Censornet, but havent had time to play with it properly yet. Using SuSE 10.1 at the mo with KDE.

  14. #14

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,802
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Proxy with content filtering

    I have an Ubuntu 6.06 box here running Squid and Dansguardian.

  15. #15
    gwendes's Avatar
    Join Date
    Jan 2007
    Location
    London
    Posts
    1,495
    Thank Post
    161
    Thanked 30 Times in 29 Posts
    Rep Power
    26

    Re: Proxy with content filtering

    Right.

    CensorNet simply will not get past the first part of the install. I've installed indentical NICs, zeroed the drive, disabled the onboard network, burnt two copies of the CD and it refuses to install. Earlier it worked - now it says that it can't create a swap partition. Not even if I say please...

    Grrrr!

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Web Content Filtering
    By richard.thomas in forum Network and Classroom Management
    Replies: 5
    Last Post: 14th November 2007, 09:50 AM
  2. Content filtering
    By mitcheln in forum School ICT Policies
    Replies: 11
    Last Post: 20th December 2006, 08:38 PM
  3. Rm SmartCache Content Filtering
    By Mintsoft in forum Windows
    Replies: 9
    Last Post: 2nd March 2006, 09:51 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •