Danguardian and Squid Proxy Installation and Configuration Outline

Danguardian and Squid Proxy Installation and Configuration

Outline What’s the Problem? n Options - Ubuntu n Getting Started – Download Source File n Tar and Gzip n Squid n Dansguardian n Potential Problems and Suggestions n

Motivation Become Familiar With Ubuntu Web-Filtering n Filter Inappropriate Content n Network Security n User Protection n Lost Productivity n Legal Issues n Adverse Publicity n

Dansguardian and Squid Proxy n n n n “Ubuntu" is an ancient African word, meaning "humanity to others". Ubuntu also means "I am what I am because of who we all are". Internet Is a Mixed Blessing Moral Obligations Ethical Obligations Contractual Obligations Productivity Solution 1– Don’t Engage in Inappropriate Activity Solution 2 - Web Filtering

Solution 2 - Ubuntu Options Tradeoff Between Flexibility and Control n Ubuntu Includes Over 16, 000 Pieces of SW n Ubuntu Core Installation Files Fit on a CD n Ubuntu SW Includes Word Processors, Spreadsheets, Web Server SW, Email SW, etc. n Dansguardian (Content Filter version 2. 9. 9. 3) n Squid (Caching Proxy version 3. 0) n

Download/Extract Dansguardian Use the Wget command – several options n “tar -xvzf dansguardian-2. 9. 9. 3. tar. gz: ” n -xvzf option n -x option to extract n -v option for verbosity n -z option to unzip n -f to use the tarfile argument as the file name n

Squid Caching Proxy Server n Supports HTTP, HTTPS, FTP and more n Reduces Bandwidth n Improves Response Time n Extensive Access Controls n Great Server Accelerator n Runs on UNIX and Windows n

Squid Configuration n n n Configure “ squid. conf ” Use a Text Editor, i. e. , vi, pico, etc. Comment “ # “ the recommended configuration After “ acl CONNECT method CONNECT “, Enter Your Network Information in the Next Two Lines Example in Next Slide Comment ( # ) “ http_access deny !safe_ports “ ( approximately line 1760 )

squid. conf n n n n n acl localnet src 128. 198. 61. 0/255. 0 acl all src 128. 198. 61. 0/255. 0 acl manager proto cache_object acl localhost src 127. 0. 0. 1/255. 255 acl SSL_ports port 443 563 http_access allow localnet http_access allow localhost http_access allow CONNECT SSL_ports http_access deny all

Dansguardian Configuration cd /. configure n make install n make clean n Enter “crontab -e “ and n Enter “ 59 23 ** sat etc/dansguardian/logrotation “ n

Dansguardian Configuration, cont’d. Path to ‘” config “ file is. . . /etc/dansguardian. conf n Set “ Proxy IP: =128. 198. 61. 253 ( actual IP of server running dansguardian ) n Set Access Denied Address to DG Server IP “ accessdeniedaddress: =http: //128. 198. 61. 253/cgibin/dansguardian. pl “ n Save and Restart n

Potential Problems/Improvements n n n n Forgetting to Setup Proxy Server in Browser Default port is 8080 ‘ make “ file or devel-tools missing Flexibility and Control Balancing Act Many available Blacklists are outdated Users Find Ways to “Get Around” Content Filters Use Updated Blacklists Supported by Commercial Products such as Smooth. Wall, ( Content Firewall )

References http: //dansguardian. org n http: //www. sequentialart. com/article/php? id=1 03 n http: //ubuntuforums. org/showthread/php? t=27 7178 n http: //www. ubuntu. com n http: //sourceforge. net/docman/index. php? grou p_id=131757 n