Dansguardian Installation [Solved]

[athanasia]

No I haven't change the squid.conf.
I thought that dansguardian will block all the sites except the ones on my exceptionsitelist and will not block anything on the pcs(eg administrators) with ip on the exceptioniplist... Obviously there are more to do in order to make it work

[medigeek]

If you're not asking anything specific and just need to block adware/ phishing / scam websites:

1. Use OpenDNS DNS servers, you can set them up for Ubuntu or your router: https://www.opendns.com/start/
You have to restart your PC (or disable and re-enable your internet connection) or your router, in order for changes to take effect

Check if it works:
- http://welcome.opendns.com
- http://www.internetbadguys.com/

2. By default, opendns blocks only phishing sites. If you need more, register and create a username and setup your network at opendns.com:



3. If you have a dynamic IP, you can control it with http://www.dnsomatic.com (a service that updates the IP used in services like opendns.com and no-ip.com)

In greek:
http://forum.ubuntu-gr.org/viewtopic.ph ... 017#p57017
http://forum.ubuntu-gr.org/viewtopic.ph ... =10#p57081

[charizan]

actually after a quick search in google you will not have to change anything in squid...they usually change smth to squid at the old configurations where was a small mixed up with squidgaurd and dansguardian.
your dansguardian.conf file looks ok, probably you will only have to check you blacklists , expeptions etc.
have in mind that the default content filtering configuration of dansguardian is quite paranoid....so it will be good to look at it before deploy it (cause the phone will not stop ringing!!!)

tell us if you need any more help

[athanasia]

Thank youy guys for all your help...

I will do the suggested changes as soon as I finish what I am doing and will let you know...

[athanasia]

Hi again

Thank you guys I managed to make it work with blacklists , exceptions etc... but what I need is the users be able to browse only on the websites on my exceptionsitelist so in this way I will have to enter every possible site on my blacklist
I tryed to enter a generic blacklist e.g: *.com as theo advised me but it doesn't work.

Any idea?

[theo]

Try to put the generic urls into the bannedsitelist instead:

This is some description on how it works:

Code: Select all

#domains in banned list
#Don't bother with the www. or the http://

#The bannedurllist is for blocking PART of a site
#The bannedsitelist is for blocking ALL of a site

#As of DansGuardian 2.7.3 you can now include
#.tld so for example you can match .gov for example


so for banning .com you just put .com instead of *.com

Be careful though because I am not sure if this file has priority over the others. It may block .com sites in your exceptionslist. Try it on a non production environment . And let us know of the results!

[athanasia]

Thanks a lot

The bannedsitelist worked and it doesn't block .com sites in my exceptionslist )) That's exactly what i needed....
I was trying today the bannedregexpurllist with *.com but it didn't except it and it didn’t let me start dansguardian … now with the bannedsitelist it all works ok
Thanks once again…

[theo]

Just for the record. Some of the people in this topic (charizan, theo) spend weeks to set up dansguardian from source on RHEL/CentOS. The same people spend 10 minutes to set it up on Debian from the repositories! And there are some yum 3rd party repos that include dansguardian but without clam support!

Based on a true story!

[charizan]

yep thats true. Also if anyone of you tries to use dansguardian, dont read the old articles that you can find in the web that they instruct you to use squid,squidguard, dans guardian , clam,etc.
The new version of dansguardian contains (clam, squidguard- of course you can use and other av engines) av engine and blacklist capabilities...so its just your proxy app and dansguardian.

Athanasia if you spent some time with dansguardian trust you will be able to have an application that will not miss a thing from the traffic that goes through your proxy. Also you can put passwords for some users in case that they want to disable it, etc.

[charizan]

guys just a question, has anyone of you install and configured dansguardian???
if yes i would like to hear your comment about it!!
thanx