1. Danguardian and Squid Proxy Installation and Configuration

2. Outline What’s the Problem? What’s the Problem? Options - Ubuntu Options - Ubuntu Getting Started – Download Source File Getting Started – Download Source File Tar and Gzip Tar and Gzip Squid Squid Dansguardian Dansguardian Potential Problems and Suggestions Potential Problems and Suggestions

3. Motivation Become Familiar With Ubuntu Web-Filtering Become Familiar With Ubuntu Web-Filtering Filter Inappropriate Content Filter Inappropriate Content Network Security Network Security User Protection User Protection Lost Productivity Lost Productivity Legal Issues Legal Issues Adverse Publicity Adverse Publicity

4. Dansguardian and Squid Proxy “Ubuntu" is an ancient African word, meaning "humanity to others". Ubuntu also means "I am what I am because of who we all are". “Ubuntu" is an ancient African word, meaning "humanity to others". Ubuntu also means "I am what I am because of who we all are". Internet Is a Mixed Blessing Internet Is a Mixed Blessing Moral Obligations Moral Obligations Ethical Obligations Ethical Obligations Contractual Obligations Contractual Obligations Productivity Productivity Solution 1– Don’t Engage in Inappropriate Activity Solution 1– Don’t Engage in Inappropriate Activity Solution 2- Web Filtering Solution 2- Web Filtering

5. Solution 2 - Ubuntu Options Tradeoff Between Flexibility and Control Tradeoff Between Flexibility and Control Ubuntu Includes Over 16,000 Pieces of SW Ubuntu Includes Over 16,000 Pieces of SW Ubuntu Core Installation Files Fit on a CD Ubuntu Core Installation Files Fit on a CD Ubuntu SW Includes Word Processors, Spreadsheets, Web Server SW, Email SW, etc. Ubuntu SW Includes Word Processors, Spreadsheets, Web Server SW, Email SW, etc. Dansguardian (Content Filter version 2.9.9.3) Dansguardian (Content Filter version 2.9.9.3) Squid (Caching Proxy version 3.0) Squid (Caching Proxy version 3.0)

6. Download/Extract Dansguardian Use the Wget command – several options Use the Wget command – several options “tar -xvzf dansguardian-2.9.9.3.tar.gz:” “tar -xvzf dansguardian-2.9.9.3.tar.gz:” -xvzf option -xvzf option -x option to extract -x option to extract -v option for verbosity -v option for verbosity -z option to unzip -z option to unzip -f to use the tarfile argument as the file name -f to use the tarfile argument as the file name

7. Squid Caching Proxy Server Caching Proxy Server Supports HTTP, HTTPS, FTP and more Supports HTTP, HTTPS, FTP and more Reduces Bandwidth Reduces Bandwidth Improves Response Time Improves Response Time Extensive Access Controls Extensive Access Controls Great Server Accelerator Great Server Accelerator Runs on UNIX and Windows Runs on UNIX and Windows

8. Squid Configuration Configure “ squid.conf ” Configure “ squid.conf ” Use a Text Editor, i.e., vi, pico, etc. Use a Text Editor, i.e., vi, pico, etc. Comment “ # “ the recommended configuration Comment “ # “ the recommended configuration After “ acl CONNECT method CONNECT “, Enter Your Network Information in the Next Two Lines After “ acl CONNECT method CONNECT “, Enter Your Network Information in the Next Two Lines Example in Next Slide Example in Next Slide Comment ( # ) “ http_access deny !safe_ports “ Comment ( # ) “ http_access deny !safe_ports “ ( approximately line 1760 )

9. squid.conf acl localnet src 128.198.61.0/255.255.255.0 acl all src 128.198.61.0/255.255.255.0 acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl SSL_ports port 443 563 http_access allow localnet http_access allow localhost http_access allow CONNECT SSL_ports http_access deny all

10. Dansguardian Configuration cd /.configure cd /.configure make make make install make install make clean make clean Enter “crontab -e “ and Enter “crontab -e “ and Enter Enter “ 59 23 ** sat etc/dansguardian/logrotation “

11. Dansguardian Configuration, cont’d. Path to ‘” config “ file is... Path to ‘” config “ file is.../etc/dansguardian/dansguardian.conf Set “ Proxy IP:=128.198.61.253 Set “ Proxy IP:=128.198.61.253 ( actual IP of server running dansguardian ) ( actual IP of server running dansguardian ) Set Access Denied Address to DG Server IP Set Access Denied Address to DG Server IP “ accessdeniedaddress:=http://128.198.61.253/cgi- bin/dansguardian.pl “ “ accessdeniedaddress:=http://128.198.61.253/cgi- bin/dansguardian.pl “ Save and Restart Save and Restart

12. Potential Problems/Improvements Forgetting to Setup Proxy Server in Browser Forgetting to Setup Proxy Server in Browser Default port is 8080 Default port is 8080 ‘ make “ file or devel-tools missing ‘ make “ file or devel-tools missing Flexibility and Control Balancing Act Flexibility and Control Balancing Act Many available Blacklists are outdated Many available Blacklists are outdated Users Find Ways to “Get Around” Content Filters Users Find Ways to “Get Around” Content Filters Use Updated Blacklists Supported by Commercial Products such as SmoothWall, ( Content Firewall ) Use Updated Blacklists Supported by Commercial Products such as SmoothWall, ( Content Firewall )

13. References http://dansguardian.org http://dansguardian.org http://dansguardian.org http://www.sequentialart.com/article/php?id=1 03 http://www.sequentialart.com/article/php?id=1 03 http://www.sequentialart.com/article/php?id=1 03 http://www.sequentialart.com/article/php?id=1 03 http://ubuntuforums.org/showthread/php?t=2 77178 http://ubuntuforums.org/showthread/php?t=2 77178 http://ubuntuforums.org/showthread/php?t=2 77178 http://ubuntuforums.org/showthread/php?t=2 77178 http://www.ubuntu.com http://www.ubuntu.com http://www.ubuntu.com http://sourceforge.net/docman/index.php?gro up_id=131757 http://sourceforge.net/docman/index.php?gro up_id=131757 http://sourceforge.net/docman/index.php?gro up_id=131757 http://sourceforge.net/docman/index.php?gro up_id=131757