[Tfug] A question for somebody else...

[Ian McEwen]

One option you might consider is DNS-based filtering; OpenDNS provides a
service that blocks sites based on content, where the manager of DNS for a
subnet can choose what is allowed/disallowed; I've seen this used at one
airport I visited, that wanted to block various non-work-related sites from
their employees' use. Not to mention, OpenDNS has had the DNS hole blocked
(as best it can be, anyway) for longer than almost anybody, which is always
a good sign.

Blocklists and the (rather easy for a user of reasonable prowess) hole
inherent in proxying will always be a problem when trying to block off
anything, though. Just ask anyone who's gone through TUSD :)

--
Ian McEwen

On Mon, Aug 11, 2008 at 7:27 AM, Tim Ottinger <tottinge at gmail.com> wrote:

> Rich wrote:
> > On Aug 11, 2008, at 6:33 am, Tim Ottinger wrote:
> >
> >> I once installed squid as transparent proxy for a church,
> >>
> > <insert witty joke about porn filters and churches>
> >
>
> <grins>
>
> They had computers in the youth and children's areas for "hang time" and
> games.  They wanted to make sure that the fun and games were not going
> to go wrong.
> >> and I remember pulling a blacklist from somewhere.  I think that
> >> it's a tough game, and you have to continually review logs for
> >> false positives and non-rejected sites.
> >>
> >
> > Or set up a cron job to keep pulling a blacklist you trust.
> > Obviously, you'll want to test it first, and check things like
> > breastfeeding or breast cancer sites aren't blocked.
> >
> Right.  I had done just that.  They had funny ideas also about what
> constituted "violence".
>
>
>
> _______________________________________________
> Tucson Free Unix Group - tfug at tfug.org
> Subscription Options:
> http://www.tfug.org/mailman/listinfo/tfug_tfug.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://tfug.org/pipermail/tfug_tfug.org/attachments/20080811/06d3e9be/attachment-0002.html>