On Tue, Sep 09, 2008 at 11:11:06AM +0300, Gabor Szabo wrote:
I have been using the Moreshet service since the days of Actcom but in
the past couple of months it has been down very frequently for several hours
meaning I could not use the Internet at all.
I am thinking on setting up something on the computer use by my children.
First I thought setting up a proxy but I'd like to filter everything
including chat
and similar things and then allow services on a case base case.
The latest idea I had was to configure a firewall on my the computer
of my children to and let that filter the services and the sites.
The classic way of doing it is to use DansGuardian which couples with
Squid and port redirection so that anything going out on port 80
gets redirected to squid. Aka "trasparent proxy". Squid then forwards it
to DansGuardian.
The rub is that DansGuardian is relatively stupid. It can not tell the
difference between "chicken breast", "breast cancer" or "naked breast".
That may be a difference to you, it may not. I have no idea of how
much effort that level of AI would take, and it may not be really possible
anyway.
AFAIK, it does not support Hebrew. Or more accurately, it may not
come with word lists for Hebrew, and they may not be available. How ISP's
filter content, if they do at all, would, I expect be a closely guarded
competitve secret.
The other question is what exactly do you filter? I have no idea of
how skilled your children are in circumventing firewalls. Many things
are now designed to traverse NAT and look like regular http requests.
One multiplayer game was set up as an example to use DNS (UDP port 53)
just to show it can be done.
SKYPE has made an art of sneaking through firewalls. Good if you want to
use it, bad if you are paying for someone else's use of bandwidth.
You also can for example, cause DNS names to resolve nowhere or back to
your server. I do that for the particulary bad ones, and also set up
a PERL script to add firewall reject rules based upon a list. To be honest,
I'm not even sure it's still in use.
I found that over the period of a day DansGuardian blocked many sites I wanted
to go to, e.g. Sky News, LGF, torrent search sites and so on. I just gave
up.
Geoff.
--
Geoffrey S. Mendelson, Jerusalem, Israel [EMAIL PROTECTED] N3OWJ/4X1GM
=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
