LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 11-04-2009, 06:08 AM   #1
kevintquinn
LQ Newbie
 
Registered: Nov 2009
Posts: 3

Rep: Reputation: 0
Question Help! - need secure laptop for my 9 year old daughter


Hi there,

I have tried to build a secure laptop for my 9 year old daughter to enable her to do schoolwork and browse the web for the usual things that 9 year old girls find interesting. I have failed to get squid proxy and blacklists configured correctly - due to my lack of knowledge.

I have a laptop with OpenSuSE 11.1 but i am not wedded to this. I would quite happily download a precondifured ISO of any linux with internally redirected web browser to go through a proxy and web filter on the same machine to stop all the nasty stuff appearing.

I dont want to set up an external proxy/filter on another machine or on my router. I am quite happy that she will not be able to hack a local setup, and if or when she does then I will cross that bridge when i come to it.

Any suggestions guys? Any help appreciated.

Kind regards

Q
 
Old 11-04-2009, 06:11 AM   #2
repo
LQ 5k Club
 
Registered: May 2001
Location: Belgium
Distribution: Arch
Posts: 8,529

Rep: Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899
Did you looked at squid and squidguard?
 
Old 11-04-2009, 06:24 AM   #3
EricTRA
LQ Guru
 
Registered: May 2009
Location: Gibraltar, Gibraltar
Distribution: Fedora 20 with Awesome WM
Posts: 6,805
Blog Entries: 1

Rep: Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297Reputation: 1297
Hello and Welcome to LQ,

Have at look at this thread and this article. I'd check out the OpenDNS option since it's 'portable' wherever your daughter takes her laptop.

Kind regards,

Eric
 
Old 11-04-2009, 06:26 AM   #4
kevintquinn
LQ Newbie
 
Registered: Nov 2009
Posts: 3

Original Poster
Rep: Reputation: 0
Yes, I did look at squid and squidguard. I installed them from the app manager in openSuSE 11.1 but after following the configuration guides I could still browse to playboy.com (my standard test for blocked site access).

If it was on a seperate machine I am sure I could get it working, I used to build and configure Novell BorderManager and am quite okay with the logical traffic paths and concepts of redirection and filtering but the config instructions just dont seem to work for me.

Kind regards

Q
 
Old 11-04-2009, 06:33 AM   #5
kevintquinn
LQ Newbie
 
Registered: Nov 2009
Posts: 3

Original Poster
Rep: Reputation: 0
Thanks EricTRA

I will check out the thread and look at the products suggested.

Much appreciated.

Q
 
Old 11-04-2009, 06:36 AM   #6
ddaemonunics
Member
 
Registered: May 2008
Location: Romania
Distribution: Debian
Posts: 242

Rep: Reputation: 41
take a look at privoxy.. http://www.privoxy.org/ ...it will do the job
http://www.privoxy.org/user-manual/actions-file.html

Last edited by ddaemonunics; 11-04-2009 at 06:38 AM.
 
Old 11-04-2009, 09:02 AM   #7
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Are you sure you want to blacklist? With a nine year old, I'd think whitelisting would be much better. I set up Squid to whitelist on my friend's PC a little while ago. He has a nine year old daughter too. I made it so that only specific children's sites (as well as a few educational ones) would work. The only application we used was Squid, nothing else.
 
Old 11-04-2009, 03:01 PM   #8
salasi
Senior Member
 
Registered: Jul 2007
Location: Directly above centre of the earth, UK
Distribution: SuSE, plus some hopping
Posts: 4,070

Rep: Reputation: 897Reputation: 897Reputation: 897Reputation: 897Reputation: 897Reputation: 897Reputation: 897
Quote:
Originally Posted by kevintquinn View Post
Yes, I did look at squid and squidguard. I installed them from the app manager in openSuSE 11.1 but after following the configuration guides I could still browse to playboy.com (my standard test for blocked site access).
But, what exactly was wrong? Did the browser not use squid or was squid not configured to block the site(s) that you wanted to block? Without knowing which problem you had, I don't think a fix is likely to be forthcoming.

If you think security is best in layers (& it is), using this as well as OpenDNS would be good.

Are you defining 'secure' as 'with website blocking' and prepared to ignore other potential security aspects?
 
Old 11-04-2009, 10:18 PM   #9
craigevil
Senior Member
 
Registered: Apr 2005
Location: OZ
Distribution: Debian Sid/RPIOS
Posts: 4,865
Blog Entries: 28

Rep: Reputation: 530Reputation: 530Reputation: 530Reputation: 530Reputation: 530Reputation: 530
I would suggest using Firefox with Glubble as well as OpenDNS. With Glubble you can whitelist the sites you feel OK with a child viewing, and just to be on the safe side since kids are darn smart use OpenDNS to block sites that are unsafe.
 
Old 11-04-2009, 10:35 PM   #10
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Do the OpenDNS restrictions only work if you access domains? If you use Squid for this, it's a piece of cake to make sure the child is completely unable to send any packets out to the Internet on her own. One single iptables command will force the child to go through Squid, and therefore be subject to your access control lists. Example:
Code:
iptables -I OUTPUT -o eth0 -m owner --uid-owner samantha -j REJECT
The only way for her to surf the Web would be via Squid on localhost.

Last edited by win32sux; 11-04-2009 at 10:36 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
BRANSTORMING SESSION! Linux for 15 year old laptop? jmite Linux - Distributions 2 09-12-2008 11:40 PM
Best Linux Distro for a 5 year old desktop and a 3 year old laptop silencer07 Linux - General 15 07-25-2008 03:44 PM
linux on 7 year old laptop?? matthew135 Linux - Laptop and Netbook 17 07-19-2008 08:35 PM
LXer: The year of the Linux Mini Laptop! LXer Syndicated Linux News 0 06-05-2008 09:00 PM
Games for my daughter teufelhund Linux - Games 2 08-01-2007 11:42 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 07:48 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration