Anything clever I can do?

[Jawloms]

Hi all,

 

I'd like to have a level of filtering at home on some of my Internet traffic. I have 2x Netgear WAP102, 1x Netgear FSM726, 1x 2008R2 DC, 1x Thomson Internet router (obviously with wireless in it too) with PlusNet. What I want is two wireless networks, one for my kids and their friends to connect to with a bit of filtering on, and the other for grown-ups to connect to. I was thinking of making (for example) WAP1 a DHCP server with one set of DNS, and WAP2 another DHCP (obviously with a slightly different scope) with a different set of DNS. Presumably though there could be odd occassions where the wrong settings get handed out? Is there anything I can do with VLANs/RADIUS/whatever which would get me round this?

 

Thank you

 

Stuart

[johnat1121]

Hey,

One very simple way I use at home to achieving basic filtering is to just change the default DNS server on the router to something like Norton DNS: 198.153.192.60 and 198.153.194.60, which filters out Security threats, Porn and Non Family Friendly Sitesand then just modify the DNS on PCs which may which to access sites which contain adult material e.g. using Google DNS: 8.8.8.8 and 4.4.4.4. However this is very easily circumvented but good for simple protection for children who don't have enough knowledge to change DNS settings.

[featured_spectre]

Do you have a raspi which can act as a squid/dansguardian box? or even a microPC?

[Jawloms]

I don't want to just change the DNS as that would filter everyone. I was going to put opendns in one of the WAPs and PlusNets DNS in the other.

 

I do have a raspi! I'll take a look at squid etc. Thanks.

[featured_spectre]

No problems. Can add filtering lists based on IP addresses.

[Jawloms]

I'd like to not have to specify IPs though, I'd like to just have a filtered network, and an unfiltered network. If I have to worry about IP addresses then I'd need to faff about if my daughter has a friend around with a device they want connected to my Internet. It would be so much easier to give them the wireless key and let them get on with it. I'll still look at squid to perform the filtering once they are connected though.

[featured_spectre]

Good planning...best to also add Justin Beiber and 1 Direction to your filters too. lol

[twin--turbo]

squid will do subnets with ease. so one subnet for adults on for the kids.

 

We used to use squid + squidguard + urlblacklists.

 

DansGuardian will roll it up for you.

 

Rob

[plexer]

Stick a wifi adapter in the pi and set it up with squid etc.... to filter on the ssid that it broadcasts and then adults etc... just connect to the existing ssid on your wireless router for unfiltered internet.

 

Ben

[Jawloms]

Just to take this a step further......

 

I would like to give my daugher's XBox 360 internet access. It's upstairs far away from the Internet router. Could I, in theory, plug the XBox in to the Pi (which will give it an IP address too), have a wireless dongle in the Pi connecting it to my normal wireless, but have another wireless dongle in it broadcasting as a different WLAN from the home one, which my daughter and her friends can connect to and then the Pi would filter that and the XBox?

 

I hope that's clear.....

 

Stuart