Resources for “Add Web Porn Filtering and Other Content Filtering to Linux Desktops”
September 29th, 2006 by Donald Emmack in
DansGuardian “Flow of Events”: dansguardian.org/?page=dgflow
DansGuardian Download Page: dansguardian.org/?page=download
Tinyproxy Download Page: tinyproxy.sourceforge.net
DansGuardian Documentation: www.vollmar.ch/dansguardian-e.html
Using FireHol: www.pilpi.net/journal/item-985.php
“HOWTO Lockdown Mozilla Preferences for LTSP” by Warren Togami: togami.com/~warren/guides/mozlockdown
DansGuardian Extras Link: dansguardian.org/?page=extras
URLblacklist.com: urlblacklist.com
Web Content Filtering Portal: www.harvest.com.br/asp/afn/dg.nsf
Subscribe now!
Breaking News
| Ratings, Ratings, Who's Got the Ratings? | 23 hours 41 min ago |
| British Balk at Government Getting a Discussion Database | 2 days 56 min ago |
| Yahosoft is Back, On the Light Menu | 2 days 2 hours ago |
| When Tragedy Begets Tragedy | 3 days 1 hour ago |
Featured Video
Linux Journal's own Shawn Powers tells the story of Ubuntu and his family of distributions as they search for their identities.
Delicious
Digg
Reddit
Newsvine
Technorati






firefox settings for pickup cfg file
On December 31st, 2006 Manfred (not verified) says:
Hi,
Nice article!
I have a non-preloaded firefox 1.0.7 on my distribution (slack).
I had to change/augment the greprefs/all.js file
pref("general.config.obscure_value", 0); //was 13 ; changed pref("general.config.filename", "firefox.cfg"); //Addedotherwise the firefox.cfg file would not be read.
Manfred.
Using iptables
On October 23rd, 2006 Darryl Scroggins (not verified) says:
I wanted a filtering system that would not be easy to defeat and I did not want the solution to depend on one machine being on all the time.
I ended up running dansguardian, squid, and iptables on each machine, using iptables to forces the browser to use the squid proxy at 8080.
The following line, added to the end of /etc/rc.d/rc.local, does the trick:
iptables -A OUTPUT -p tcp --dport 80 -m owner ! --uid-owner squid -j REJECT --reject-with tcp-reset
This configuration has served me well for over a year.