LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   Dansguardian not working for network users (https://www.linuxquestions.org/questions/linux-networking-3/dansguardian-not-working-for-network-users-4175437764/)

sohailkmu 11-19-2012 03:35 AM

Dansguardian not working for network users
 
Dear All,

I have configured Dansguardian alongside squid.
Now everything is fine when I use it from the machine on which dansguardian is installed. But for other users accessing from network, it is not working. I mean, sites can be accessed even when proxy settings are correct for dansguardian.

I dont know much about iptables. I think it might be some error with iptables.

please help me out

RobertP 11-19-2012 12:01 PM

Some applications ignore proxy settings from the GNU/Linux environment. You could check the environmental settings and the application's settings.

echo $http_proxy



To avoid such problems, many use a "transparent" proxy so that all requests from the LAN to the outside world are routed through Dan's Guardian. Basically, the router redirects all out-bound http requests to your DG.

Another procedure people use is a filtered DNS like openDNS. See for example, Five Best Content-Filtering Tools The idea is that all DNS requests are filtered for safe targets. A client can still use an IP address to bypass that but it stops casual users.

On the router, set up something like this if DG is running on the router.

It gets more complex if you want certain clients unhindered access to the web but it's all done with configuring iptables, squid and Dan's Guardian.

sohailkmu 11-19-2012 10:05 PM

Thanks a lot for your response.
From nowhere it has started working now.

Thanks

Quote:

Originally Posted by RobertP (Post 4832704)
Some applications ignore proxy settings from the GNU/Linux environment. You could check the environmental settings and the application's settings.

echo $http_proxy



To avoid such problems, many use a "transparent" proxy so that all requests from the LAN to the outside world are routed through Dan's Guardian. Basically, the router redirects all out-bound http requests to your DG.

Another procedure people use is a filtered DNS like openDNS. See for example, Five Best Content-Filtering Tools The idea is that all DNS requests are filtered for safe targets. A client can still use an IP address to bypass that but it stops casual users.

On the router, set up something like this if DG is running on the router.

It gets more complex if you want certain clients unhindered access to the web but it's all done with configuring iptables, squid and Dan's Guardian.


sohailkmu 11-20-2012 12:49 AM

Quote:

Originally Posted by sohailkmu (Post 4832982)
Thanks a lot for your response.
From nowhere it has started working now.

Thanks

Actually I missed out the trick. I got it today. iptables needed to be restarted.

Thanks

sohailkmu 11-20-2012 11:10 PM

Problem with Yahoo Mail using Dansguardian
 
Dear All,

Now I am facing another problem which is irritating me. using yahoo mail has become a problem now. The interface of yahoo mail is not displayed correctly. Even attachments of file types doc and xls can not be downloaded.

Kindly help me.

RobertP 11-21-2012 04:57 AM

DG can block "dangerous" file-types. See the file /etc/dansguardian/lists/bannedextensionlist

# Files which one normally things as non-executable but
# can contain harmful macros and viruses

.doc # Word document
.xls # Excel document
.pps


Edit that file and restart DG. You could alternatively bless certain web domains as trusted so files from there would not be blocked in exceptionsitelist.

sohailkmu 11-26-2012 01:03 AM

SARG not generating reports for Dansguardian
 
I was using SARG for reporting of Squid. Now the problem is I receive reports only for localhost i.e 127.0.0.1.
I have changed log file format in dansguardian to 3 i.e squid format. But when I generate report with SARG.It gives me the following error.

Maybe you have a broken date in your /var/log/dansguardian/access.log file

Kindly help me out of this situation



Quote:

Originally Posted by RobertP (Post 4833915)
DG can block "dangerous" file-types. See the file /etc/dansguardian/lists/bannedextensionlist

# Files which one normally things as non-executable but
# can contain harmful macros and viruses

.doc # Word document
.xls # Excel document
.pps


Edit that file and restart DG. You could alternatively bless certain web domains as trusted so files from there would not be blocked in exceptionsitelist.



All times are GMT -5. The time now is 10:29 AM.