+ Post New Thread
Page 2 of 3 FirstFirst 123 LastLast
Results 16 to 30 of 39
Windows Thread, Web Filtering in Technical; I just got filtered out of this post because of the combination phrase "family filter is off" . Must finish ...
  1. #16
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    5,002
    Thank Post
    120
    Thanked 282 Times in 260 Posts
    Rep Power
    108

    Re: Web Filtering

    I just got filtered out of this post because of the combination phrase "family filter is off" . Must finish doing my machine exceptions .

  2. #17
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,966
    Thank Post
    248
    Thanked 49 Times in 45 Posts
    Blog Entries
    2
    Rep Power
    46

    Re: Web Filtering

    Quote Originally Posted by ICTNUT
    I have just chucked out our ISA2000/N2H2 Filtering and replaced it with:

    Smoothwall 2.0
    Dansguardian
    Clam Anti Virus
    Advanced Proxy Filter
    Advanced URL Filter

    and as a result NOTHING (well almost) gets through, it has made my life SOOOOOO much easier in this area.

    Best of all its free and only took 2-3 hours to get up and running 1 day to fully configure and 1 week of solid out of hours testing.

    {edit}
    did i mention the fully featured web frontend to the whole thing
    {/edit}
    When you say "nothing gets through" do you mean the google searches don't return brief excerpts as mentioned in post 1, and the thumbnails that google caches don't appear either??

    We have the medium option 'moderate filtering' enforced - maybe we'll change that.

  3. #18
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    5,002
    Thank Post
    120
    Thanked 282 Times in 260 Posts
    Rep Power
    108

    Re: Web Filtering

    Just had a look at all the smoothwall stuff. Theres a good community there for all the addons. I have basically done virtually all the stuff that this lot does but without the nice integrated GUI for everything I may have to give it a spin Now I really must go to bed rather than looking at work stuff at this time on a friday night 8O 8O

  4. #19

    Join Date
    Oct 2005
    Posts
    4
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Web Filtering

    Web filtering? . . . you do it because you want to protect pupils/students from unacceptable web content such as pornography?

    But, pornography and other unacceptable content is now readily available from most P2P networks. Kids can easily run a copy of bitcomet or blubster P2P (executable file) client on their USB sticks and get easy access to content most would find offensive. i.e Ken Bigley video. Xdcc is another example of how kids can easily get access to unacceptable content from the internet - Xdcc utilises IRC with bots to distribute file lists for file sharing. Xdcc is not new but has made a comeback recently, with colleges and unis finding they have hacked servers providing disk space for file sharing by Xdcc.

    Please keep in mind unacceptable content is not only delivered through http.

    regards Peter.

  5. #20
    Guest

    Re: Web Filtering

    but any school proxy should have P2P ports closed as a matter of course. If I went to a school that could use access torrents, P2P etc, I would be asking what the IT department are playing at!

  6. #21
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    5,002
    Thank Post
    120
    Thanked 282 Times in 260 Posts
    Rep Power
    108

    Re: Web Filtering

    Most of the ports for everything but web/ftp/mail etc is usualy blocked at a local level and at the county level depending on your setup.
    You make a valid point but I dont think this has ever been a problem in most schools. Schools that have their own independent connection this would probably be a problem but any half decent sys admin would have this bolted down.
    Even if this kind of stuff is run over the http proxy which should be forced there should be restrictions on files and file sizes that they can d/l. There are lots of other ways to block things and at the same time get around them using MAC address which can be faked or stoping certain useragents from going through your proxy which can also be faked. So yes there are many ways to get hold of inappropriate material besides http but there also also many ways to block them.
    No system is perfect but we try our best and will contantly review and see how things could be done better.
    As for running stuff from removable media this should be locked down using policies.

  7. #22

    Join Date
    Nov 2005
    Posts
    43
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Web Filtering

    Quote Originally Posted by pooley
    I have a head teacher who is unhappy as while searching "welsh dragons cartoon pictures" in google came across some sites advertising porn/sex etc.

    The sites were blocked but you could still see the Blurb about the sites i.e."cum here to see naked fcuk pics" etc etc.

    Anyone use any soft that prevents sites with these words from being displayed ?

    Hi,

    Check this image out: http://www.imperosoftware.com/images/impero3.gif

    Its the blocking system of the software we use in the schools i work at. You can easily block anything. For example, block 'fuck', 'porn' and so on and Impero will detect that in the page somewhere and not show it.

  8. #23
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,453
    Thank Post
    10
    Thanked 493 Times in 433 Posts
    Rep Power
    111

    Re: Web Filtering

    Quote Originally Posted by jonny_valentine
    Quote Originally Posted by pooley
    I have a head teacher who is unhappy as while searching "welsh dragons cartoon pictures" in google came across some sites advertising porn/sex etc.

    The sites were blocked but you could still see the Blurb about the sites i.e."cum here to see naked fcuk pics" etc etc.

    Anyone use any soft that prevents sites with these words from being displayed ?

    Hi,

    Check this image out: http://www.imperosoftware.com/images/impero3.gif

    Its the blocking system of the software we use in the schools i work at. You can easily block anything. For example, block 'fuck', 'porn' and so on and Impero will detect that in the page somewhere and not show it.
    And again with the self advertising See here

  9. #24
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    5,002
    Thank Post
    120
    Thanked 282 Times in 260 Posts
    Rep Power
    108

    Re: Web Filtering

    Quote Originally Posted by jonny_valentine
    Its the blocking system of the software we use in the schools i work at. You can easily block anything. For example, block 'fuck', 'porn' and so on and Impero will detect that in the page somewhere and not show it.
    Which can be done for free with Dansguardian...

  10. #25
    ICTNUT's Avatar
    Join Date
    Jul 2005
    Location
    Hereford
    Posts
    1,419
    Thank Post
    196
    Thanked 249 Times in 122 Posts
    Rep Power
    62

    Re: Web Filtering

    Mark Said:
    When you say "nothing gets through" do you mean the google searches don't return brief excerpts as mentioned in post 1, and the thumbnails that google caches don't appear either??

    We have the medium option 'moderate filtering' enforced - maybe we'll change that.
    I have the naughtyness level set to 95, goolge image search forced to use safe=strict via a url re-write, and the blacklist available from urlblacklist.com.

    Using the above and a few extra mods found at the smoothwall community the level of AUP violations by both students and teachers has dropped right off.

    Peter Said:
    But, pornography and other unacceptable content is now readily available from most P2P networks. Kids can easily run a copy of bitcomet or blubster P2P (executable file) client on their USB sticks and get easy access to content most would find offensive. i.e Ken Bigley video. Xdcc is another example of how kids can easily get access to unacceptable content from the internet - Xdcc utilises IRC with bots to distribute file lists for file sharing. Xdcc is not new but has made a comeback recently, with colleges and unis finding they have hacked servers providing disk space for file sharing by Xdcc.
    Of course you are correct however school proxies should have these ports closed and/or filtered, although saying that you can not be too sure that the central proxy provided by your county will have them closed or even monitored so we took the steps of blocking all stuff like P2P and bit-torrent at our firewall level.

    This was done by using a combination of port blocking, packet/bandwidth shaping, throtelling outgoing bandwidth also the fact that students are unable to install anything on the workstations pretty much eliminates this issue.

  11. #26

    Join Date
    Oct 2005
    Posts
    4
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Web Filtering

    Quote Originally Posted by SYSMAN_MK
    but any school proxy should have P2P ports closed as a matter of course. If I went to a school that could use access torrents, P2P etc, I would be asking what the IT department are playing at!
    Yes, you can block P2P & IM and such by the apps default port numbers within a firewall. But, the developers of these apps are deliberately making these apps evasive and sneaky with the intent to go through firewalls. Common techniques to circumvent port blocking is to tunnel P2P & IM data within common ports such as 80 and 25. Who will close port 25 when running a mail server? P2P apps also use encrytion to make identification difficult. Skype is the most evasive and difficult app to stop to date. For example, Skype uses a https request in its preamble on the basis that most firewalls will allow https request. Why should we block Skype some say? Well its an undocumented protocol, closed protocol and can consume lots of bandwidth when running as a supernode. Also, the file transfer bit cuts right through most firewalls and therefore is a major security threat. Plus, who really knows apart from Skype development team what the program is really doing?

    Other techniques include tunneling to external proxies and there are several companies offering a commercial service specifically to evade firewalls and security. Hopster is one service.

    Preventing P2P and apps that are deliverately evasive is not easy and several P2P apps such as the new version of BitComet openly brag about evading certain expensive brand solutions - Packeteer. Also, as I mentioned in earlier post chat channels are now distributing lists for sharing files via bots.

    It all makes securing an internet connection interesting and there's always something new to learn.

  12. #27

    Join Date
    Aug 2005
    Location
    Birmingham, UK
    Posts
    490
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Web Filtering

    Quote Originally Posted by Peter
    Kids can easily run a copy of bitcomet or blubster P2P (executable file) client on their USB sticks and get easy access to content most would find offensive.
    Only if you allow them to run executables from removable devices in the first place... Perfect example of what software restriction policies are for.

  13. #28

    Join Date
    Nov 2005
    Posts
    43
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Web Filtering

    Quote Originally Posted by DMcCoy
    Quote Originally Posted by jonny_valentine
    Quote Originally Posted by pooley
    I have a head teacher who is unhappy as while searching "welsh dragons cartoon pictures" in google came across some sites advertising porn/sex etc.

    The sites were blocked but you could still see the Blurb about the sites i.e."cum here to see naked fcuk pics" etc etc.

    Anyone use any soft that prevents sites with these words from being displayed ?

    Hi,

    Check this image out: http://www.imperosoftware.com/images/impero3.gif

    Its the blocking system of the software we use in the schools i work at. You can easily block anything. For example, block 'fuck', 'porn' and so on and Impero will detect that in the page somewhere and not show it.
    And again with the self advertising See here


    DMcCoy : If i wanted to advertise, dont you think I would have signed up with some random name? I am simply adding my opinion and answering the topic.
    There are many people on this forum recommending software to solve peoples problems, I am also recommending Impero because it does exactly what the person asks for.

  14. #29
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,966
    Thank Post
    248
    Thanked 49 Times in 45 Posts
    Blog Entries
    2
    Rep Power
    46

    Re: Web Filtering

    Self advertising is only aceptable if you're not making a profit from it IMHO. If you have an interest: meaning you will be taking a buck - that means your opinion is heavily coloured and therefore invalid.

  15. #30

    Join Date
    Nov 2005
    Posts
    43
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Web Filtering

    Quote Originally Posted by mark
    Self advertising is only aceptable if you're not making a profit from it IMHO. If you have an interest: meaning you will be taking a buck - that means your opinion is heavily coloured and therefore invalid.
    I would agree, but I came to this forum for an answer to a problem i have, saw the post above and thought, 'hmm i know what can help this guy'..

    My opinion would be coloured except, i've personally tried other products and found non was good enough.



    Anyway, were getting off topic, and this poor guy needs help.. 'weblocker' is a free web filter.. its not ideal for networks but does the job.

SHARE:
+ Post New Thread
Page 2 of 3 FirstFirst 123 LastLast

Similar Threads

  1. Content filtering
    By mitcheln in forum School ICT Policies
    Replies: 11
    Last Post: 20th December 2006, 08:38 PM
  2. INTERNET & FILTERING
    By Maltese_Wizard in forum Hardware
    Replies: 11
    Last Post: 3rd November 2006, 05:31 PM
  3. Web Filtering
    By SpuffMonkey in forum How do you do....it?
    Replies: 20
    Last Post: 17th May 2006, 09:10 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •