NAT Linux Router, How to filter Porn and Ad sites ?(no squid)

phtkiller · 10-15-2003, 07:41 AM

I just build a linux gateway with NAT on a redhat 9 to share internet in my office, we have about 60 users, we need to block access to porn and some spam sites for the users. Squidguard is very nice,but it needs to be running with squid (cant do proxy here).

Any Idea?
Please Help!!
Thanks in Advance!

pht@bind.ro

IsNoGood · 10-15-2003, 08:25 AM

Don't know why you would filter out the best things on the web employees can have fun with but you could check with http://www.surfcontrol.com if that meets your requirements.

starter · 10-15-2003, 08:46 AM

Yeah man,
I have the exact same prob...po-ups and pornsites keep flooding my screen as soon as i open web browser...

phtkiller · 10-15-2003, 08:48 AM

Thanks dude, i think this wil help me, the only problem is the money.
any cheaper idea?

phtkiller · 10-15-2003, 09:07 AM

I could use a proxy and then use squidguard, but i dont want proxies in my network because their are too ugly.

I need something just like squidguard that works with NAT without any kind of proxy.
some money free solution..

Thanks

IsNoGood · 10-15-2003, 09:08 AM

Quote:

Originally posted by starter
Yeah man,
I have the exact same prob...po-ups and pornsites keep flooding my screen as soon as i open web browser...

Still fail to see what the problem is

Try mozilla or firebird as a browser.Those don't allow popups and hijacking by default.Alternatively set your current browser up that it disables such behavior.

As to content filtering:
cheaper - don't know anything except squid there.

tangle · 10-15-2003, 09:09 AM

Couldn't you get the blacklist and then block by IP address? It would ba a little time consuming, but free.

phtkiller · 10-15-2003, 09:16 AM

I could use a blacklist as a hosts file on each computer on my network, but i guess that this would too much work for me, and a user with almost no knowlodge could bypass that..

i tried to use a hosts file on the NAT server, and it only worked for the server, the computers on my network still have access to that "evil spam sites"

IsNoGood · 10-15-2003, 12:04 PM

You can block sites on the NAT server but you'll have to play catchup for the rest of your live.