Squid, SquidGuard, FreeBSD

Murray Taylor murraytaylor at bytecraftsystems.com
Sun May 2 18:12:20 PDT 2004


Looked at squidguard and dansguardian ...
looked at what the aware schools are using ...

went with dansguardian ... because it does the 'lookinside' of the
content returned as well as the site block list mode.

I also use a 'trick' that was mentioned in the Jan 2004 issue of
Sysadmin mag as below. It's listed,  not on detailed their website, so
you do need the dead tree copy.

http://www.samag.com/articles/2004/0401/


>>>>>>>>>>>>>>>>>>>>>>>> !!!!! <<<<<<<<<<<<<<<<<<<<<<<<<<<<<
>>>> you MUST read the article prior to implementation <<<<<
>>>>>>>>>>>>>>>>>>>>>>>> !!!!! <<<<<<<<<<<<<<<<<<<<<<<<<<<<<

This only works if you are running a local DNS server 

-------------------8<------------------- cut from named.conf
//
// internet web-based ad sites
// this now defines _MY_ name-server as the master reference to 
//  locate them ... as the dummy-block file just points to localhost
//  so things just vanish or appear as 'broken links' (so sad ;-( )
//  as we dont have the sites here.
//
//  SysAdmin mag Jan 2004
//
zone "adimages.go.com" { type master; file "dummy-block"; };

-------------------8<------------------- end cut - theres more

The dummy-block file looks like this (name changed to protect the
innocent! Insert your own appropriate host names)

#  more /etc/namedb/dummy-block 
$TTL 24h

@       IN SOA host.example.net. root.host.example.net. (
        200403141650
        86400
        300
        604800
        3600 )

@       IN      NS      dns.example.net.
@       IN      A       127.0.0.1
*       IN      A       127.0.0.1


What a pity - no ad sites ;-)

As I said above - RTFM in the sysadmin mag article before using this on
your system as YMMV.


Murray T


 
On Sat, 2004-05-01 at 20:40, Thomas-Martin Seck wrote:
> * Ed Stover <estover at nativenerds.com> [gmane.os.freebsd.devel.hackers]:
> 
> > Has any one successfully done squid with squidGuard on a FreeBSD later then
> > 4.5 ? I have made it work on 4.5 but nothing later because of the berkly db
> > changes after 4.5, if you have made contentent filtering work on
> > FreeBSD-current can I get some tips? I like 4.5 but 4.9 has better hardware
> > coverage.
> 
> squid and squidGuard work flawlessly on -STABLE if you don't mind that
> squidGuard (nowadays?) needs db3 from ports.
> _______________________________________________
> freebsd-hackers at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> To unsubscribe, send any mail to "freebsd-hackers-unsubscribe at freebsd.org"
> 
> ************************************************************************
> This Email has been scanned for Viruses by MailMarshal.
> ************************************************************************



************************************************************************
This Email has been scanned for Viruses by MailMarshal.
************************************************************************


More information about the freebsd-hackers mailing list