Unfortunately the performance of DansGuardian/Squid when first .. for rebuilding DansGuardian, see question Usage#11c in the Wiki FAQ. DansGuardian is an award winning Open Source web content filter which currently runs on Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X. DansGuardian is an award winning Open Source web content filter which DansGuardian is excellent at filtering pages from the Internet as it . Content is available under GNU Free Documentation License or later.

Author: Malamuro Dailmaran
Country: Kazakhstan
Language: English (Spanish)
Genre: Spiritual
Published (Last): 2 December 2009
Pages: 359
PDF File Size: 4.37 Mb
ePub File Size: 18.65 Mb
ISBN: 462-5-30267-429-1
Downloads: 17354
Price: Free* [*Free Regsitration Required]
Uploader: Jugrel

DansGuardian is architected as a large number of closely cooperating processes. There’s no need to find a script to combine blacklists or categories, or figure out when to execute it. Phraselist configuration and Editing.


You can use existing or make new SME groups to give users different levels of Filtering. Although multi-word filter group names containing white space are supported, using them might not be a good idea. Admittedly this is rather vague; attempt the general goal of minimizing swapping anyway. If you choose to use or trial the dansgusrdian from blacklist.

This problem may also affect several of the recommended solutions below. For example here’s what some of the lines added to bannedsitelist might look like:. DansGuardian Documentation Wiki You are here: A third possibility if the information is stored in LDAP is to use ldapsearch. DansGuardian is frequently paired with either Tinyproxy or Oops!

preventing_skipping_around | DansGuardian Documentation Wiki

One way to keep track of which list file belongs to which filtergroup is to name the list files accordingly. So if you see regular expressions being used to identify particular hosts, investigate using dstdomain instead. A second possibility is to use a tool supplied by Microsoft possibly one executing on a different computer, which opens up additional security issues.


If performance is poor with just Squid interposed in the traffic path like this, the most likely problems are:. Include’d in banned…list’s, and whenever something is listed in both a banned…list and an exception…list, the exception…list listing takes precedence.

Your Operating system may allow you to lock down your browser proxy settings, an alternative is to use the tick box in the panel to block ports to stop the filter being bypassed. We’ll start with the master configuration files. If the number of child processes changes memory utilization so the amount of swapping changes significantly, this may in turn have a large effect on performance. From some older release notes: Odcumentation the Linux ‘cron’ facility to schedule automatic frequent execution of the script every day?

After you have configured the number of filter groups, you need to configure which users are assigned to which filter group configuration. An example of grey list use is when in Blanket Block whitelist mode and you want to allow some sites but still filter as normal on their content.

Dansguardian Denied Action

Knowing which filter group a request was assigned to can be invaluable during debugging. Added filter group support so different filtering settings can be used for different groups of users.

In this case there is no danxguardian to customize OpenDNS to forbid only some categories. Edit the file as you see fit, commenting out lines for things you don’t want to be blocked. This never used to matter much, because typical PC hardware couldn’t handle more than about a thousand simultaneous users anyway.


If you find this is what’s happening, increase the parameter to a much larger value thousands or even tens of thousands. If you’re receiving E-Rate funding discounts, CIPA requires you to prevent access to pornographic and obscene content, and that’s all we should do for our adult patrons.

The parameter maxchildren should generally be about the same as your peak number of simultaneous users. And here we assume DansGuardian and Squid are running on the main firewall computer rather than elsewhere. Rather, the algorithms figure that if a certain threshold of dirty words is reached on a page, odds are there are also pornographic visual materials on the page and the page is therefore blocked. You’ll probably only need to put in your password for the first one you click, the computer remembers you authenticated for a few minutes.

Include line for that category. Customizing the Block Page. If you get “bash: What it means is that memory readings right after booting or restarting the filter are not very useful. Although this is called a blacklist, the categories can be used as white or grey lists also.