Thanks a million for a great howto!
Thanks a million for a great howto!
ASUS M2A-MVP, AMD Athlon 64 X2 4000+, 3 Gb DDR2 800Mhz, GeForce 8600GT XXX Edition, Ubuntu 8.10
is there a way to force all computers on a lan to use dansguardian? is it in the firewall rules maybe?? heres my setup
0o.inet.o0
||
eth1
ubuntu/router/dan server
eth0
||
switch
/|\
network
On ubuntu 8.04 I can't lock Firefox settings with lockPref.
I've tried to update the /etc/firefox-3.0/pref/firefox.js but it doesn't work.
If I use "pref" instead of "lockPref" the setting is taken into account.
Any idea?
Just installed Ubuntu. Works wonderful. Before I was a Debian user.
Always wanted to install an internetfilter, e.g. DansGuardian. Finally this one. Your HOWTO is perfect! Everything works! Thank you.
Thank you and God Bless!!!
I wanted to relate that I used iptables instead of firehol to get a proxy and DansGuardian to work.
The first command I used was to allow only root, dansguardian, and the proxy user (for Squid in my setup) to be able to access port 80 and the rest to be redirected to port 8080:
Of course, there may be no use in putting the Dansguardian user. Remember to write in the specific users on your system. The "-m owner ! --uid-owner root" attributes check for and relates not to redirect the root user's packets.Code:sudo iptables -A OUTPUT -t nat ! -d 127.0.0.1 -p tcp --dport 80 -m owner ! --uid-owner root -m owner ! --uid-owner proxy -m owner ! --uid-owner 118 -j REDIRECT --to-ports 8080
The second prevents access from a browser directly to the proxy on port 3128:
I used some ideas from:Code:sudo iptables -t filter -I OUTPUT -d 127.0.0.1 -p tcp --dport 3128 -m owner ! --uid-owner dansguardian -j REJECT --reject-with icmp-host-prohibited
Joe Bolin http://www.linux.com/articles/113733
Olli Savolainen http://www.pilpi.net/journal/item-985.php
Last edited by mysteryous; May 20th, 2008 at 07:09 AM. Reason: Clarity
Great howto, easy to install.. Works like a charm with Sidux 32bit version...Too bad the DGGUI is not available as a separate package. Though I don't mind administering from CLI, it would be nice to have a gui to offer to people who want this functionality but lack the knowledge of the command line.
Try WebStrict: http://www.ubuntume.com/webstrictit would be nice to have a gui to offer to people who want this functionality but lack the knowledge of the command line.
To install it:
Add the following lines at the end of the file:Code:gksudo gedit /etc/apt/sources.list
Save the file and close the editor.Code:deb http://ppa.launchpad.net/ubuntume.team/ubuntu hardy main deb-src http://ppa.launchpad.net/ubuntume.team/ubuntu hardy main
Then:
Code:sudo aptitude update sudo aptitude install webstrict
Thank you for the suggestion, I really appreciate it. Couple of questions though. Though I like ubuntu, I'm primarily a debian/sidux user, and wanted to know if webstrict can be installed on sidux using the steps you outlined... Obviously I would need to modify the commands for sidux, but is webstrict just a front-end to Dansguardian? Similar to what the ubuntu CE has? If so, I assume I can just add the repository to my sources.list and install it as you mentioned. Assuming it creates a menu and such... Is this something that i can install on top of my existing setup (which is based on the tutorial at the beginning of this thread). Again thanks for your response(s).
Yes WebStrict is just a GUI frontend to dansguardian. It is a java application so you should have java installed (better is sun-java-6)
Following the steps I described should be fine, if you don't find the menu you can launch the app in a terminal by typing "webstrict".
Tell me if it works.
Bookmarks