From owner-freebsd-isp Thu Jan 24 21:34:51 2002 Delivered-To: freebsd-isp@freebsd.org Received: from mx1.dev.itouchnet.net (devco.net [196.15.188.2]) by hub.freebsd.org (Postfix) with ESMTP id 1689C37B416 for ; Thu, 24 Jan 2002 21:34:48 -0800 (PST) Received: from nobody by mx1.dev.itouchnet.net with scanned_ok (Exim 3.33 #2) id 16Tz2Q-000MW3-00 for freebsd-isp@freebsd.org; Fri, 25 Jan 2002 07:36:34 +0200 Received: from shell.devco.net ([196.15.188.7]) by mx1.dev.itouchnet.net with esmtp (Exim 3.33 #2) id 16Tz2P-000MVi-00; Fri, 25 Jan 2002 07:36:33 +0200 Received: from bvi by shell.devco.net with local (Exim 3.33 #4) id 16Tz62-000DEx-00; Fri, 25 Jan 2002 07:40:18 +0200 Date: Fri, 25 Jan 2002 07:40:18 +0200 From: Barry Irwin To: Scott Blaydes Cc: Adrian Gonzalez , freebsd-isp@freebsd.org Subject: Re: Content filtering Message-ID: <20020125074018.B41830@itouchlabs.com> References: <3.0.6.32.20020124185142.00f443a8@globalpc.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from sblaydes@rnetinc.net on Thu, Jan 24, 2002 at 10:15:03PM -0500 X-Checked: This message has been scanned for any virusses and unauthorized attachments. X-iScan-ID: 86551-1011936994-32943@mx1.dev.itouchnet.net version $Name: REL_2_0_2 $ Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Thu 2002-01-24 (22:15), Scott Blaydes wrote: > > Is there any software package out there (commercial or not) to do content > > filtering under FreeBSD? Basically, we install FBSD for our customers in > > mail server/dns/firewall setups, and many have asked if there's a way for > > them to restrict which of their users access what on the web. I'm looking > > for something maybe with a web interface for configuration so that we don't > > have to go in and tweak settings for each customer every time they find a > > web site they don't want their employees accessing. I have always used squid caching proxy, it supports a really wide range of ACL's and is reliable. Unfortunately I'm not really aware of any web interfaces for configuring squid tho. Another nice system to install is nntpcache (although this requires licensing) for prroxying and filtering NNTP (news) traffic. Squid even supports transparent proxy. Combine these with appropriate firewall rules and away you go. Barry -- Barry Irwin bvi@itouchlabs.com +27214875150 Systems Administrator: Networks And Security Itouch Labs http://www.itouchlabs.com South Africa To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message