Thanks to an article by Skippy, and considerable time staring at Postfix, The Definitive Guide, I've gotten a whitelisting system set up for my daughter. She can now receive email from a very select list of addresses. Anyone else gets rejected.
The second part is to get a whitelisting proxy server set up for her.
The goal is to give her her own computer for her birthday, but to make it completely internet-proofed. I want her to be able to go to her favorite websites, but not to other places.
And, no, I'm not interested in your remarks about how overprotective I am, or how I'm stunting her ability to learn, so don't even bother.
I briefly considered using Squid, but I think I'll try to do it with mod_proxy first. Probably not ideal, but I figure you should eat your own dogfood whenever possible.
I'm using Squid on my LEAF/Bering router for my kids' whitelist. I use the following line in /etc/squid/squid.conf:
I don't use Squid for much caching (due in part to the limited resources in my diskless router), so I'm probably using the wrong tool for the job. I fiddled with tinyproxy a little, but it seemed considerably worse than Squid for my needs.
Someone needs to create a simple non-caching policy-based HTTP proxy server. Preferably said policy-based proxy server would be executable on my LEAF/Bering router.
Thanks. That's *exactly* the kind of example I have been googling for for the last 2 hours. Simple once you know how.
ok, for the sake of anyone else looking, particularly anyone who is completely new to Squid, the more complete config example is:
where "/usr/local/squid/etc/ok_domains" contains entries like
If you don't have the leading . apparently it won't work. Maybe that's not true, but I'm too tired to spend any more time on it, and it's working now.
True, the leading dot must be there if you want to allow all subdomains. However, I believe you can do something like
www.pollypocket.com
to make sure she doesn't go to any other subdomains.
Well, no. For example, I also needed the leading . to just go to 'rcbowen.com', with no hostname or "subdomain".
Oh, and, for the record, mod_proxy really isn't cut out for this sort of thing. I'd have to add either a <Proxy> or <ProxyMatch> block for every website I wanted to permit. No chance of that.
I have been playing around with the same sort of thing lately and am currently trying out dansguardian. Looks to be great so far.
... Firefox so that they can only access a list of approved sites. Here’s how I do it (thanks to DrBacchus and skippy for the assist):
Install squid (...
... Firefox so that they can only access a list of approved sites. Here’s how I do it (thanks to DrBacchus and skippy for the assist):
Install squid (...