IPchains- Blocking web addresses

sihere · 10-21-2002, 07:23 AM

I am currently using Smoothwall as a firewall and want to block certain adult internet sites, I can do this using their IP address in IPchains but they often rotate the IP address, can you block an IP via it's DNS entry (i.e. it's web address) and if so how.
Thanks

Si

unSpawn · 10-21-2002, 08:27 AM

Even tho you could maintain it by feeding a list of sitenames in /etc/hosts or the firewall itself or use a browser like Opera that supports domainname filters, IMO it's easier to maintain if you use a proxy like Privoxy, Squid or the like because with a few regexes you'll speed up surfing banning out adds and smut. Just like blackholing spamhauses for smtp, there are sites that maintain lists of site/path regexes for proxies.

// Modnote: I transfer this to /networking, it ain't about security.

sihere · 10-22-2002, 03:05 PM

Sorry I am a little new to this, what would that mean??

Si

peter_robb · 10-22-2002, 06:39 PM

Visit www.dansguardian.org and look at their install notes.

You'll need to install that and Squid.

DansGuardian sits between the browsers and the internet, filtering eveything from ip numbers to names to attachments to words in pages.
A very complete product.
Daniel Barron has also made a commercial version for Smoothwall, but the original hack is still floating around.
Maybe some money for the good work is appropriate here...

Regards,
Peter

sihere · 10-23-2002, 06:59 AM

Thanks and think you are right, credit where credit is due...

Si