Hi,

I've setup Squid and Dansguardian-2.8 for safe browsing. But now I don't know how to configure Dansguardian properly so that I don't have to do manual proxy settings in the browser and that it blocks all inappropriate browsing such as porns.

Thanks in advance for any help.

Mahmoud

You need to make your proxy transparent, so that all requests for the internet that go through your box get routed via squid and therefore dansguardian.

Using IPTables, this can be done by running the following lines

iptables -A PREROUTING -i $INTIF -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
/sbin/service iptables save
/sbin/service iptables restart

...replacing $INTIF with your LAN-side interface (eg. eth1). Also, if Squid is running on a port other than 3128, change that too..

This will automatically route anything heading to port 80 via port 3128 where squid is sitting.

HTH

A little bit more info is needed...

Dansguardian should be listening on the LAN interface port 80.. eg 192.168.1.1:80
squid on 127.0.0.1 port 3128..

squid.conf should have these lines to make it handle transparent virtual requests..
http_port 127.0.0.1:3128
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_single_host off
httpd_accel_uses_host_header on

and iptables should have..
iptables -t nat -A PREROUTING -i eth~ -p tcp --dport 80 -j DNAT --to-destination 192.168.1.1
#eth~ is the LAN interface

You can also add a second rule for port 443 for https..

In this configuration, everything from the LAN going out to port 80 gets diverted to dansguardian which then sends it to squid..

If squid listens on only 127.0.0.1 there is no need to block packets from everywhere from finding it and bypassing dansguardian, or internet sources using it as an open proxy..
Likewise with dansguardian.. only the LAN interface is sent to it..

Thanks a lot for your help, I was stuck and really used your help. I'm a newbie to the world of Linux.

Welcome...

The most hated but most frequently used comment is "RTFM"... read the manual..
This info is on the dansguardian website under the Docs & HOWTO section..
http://dansguardian.org/downloads/DGandTransparent.txt
and of course once it's working ok, the Docs suddenly make sense..

I have just changed a few things to make it more resilient..