i would suggest using squid with dansguardian to provide a decent content filtering solution. You have the issue of how to force all non server web requests to use the proxy, so you would either use iptables on the router to transparently redirect and port 80 requests passing through into the proxy or just block those port 80 requests outright, forcing all clients to manually connect to the proxy.
you don't actually *Need* suid here, dans runs as a parent proxy to squid normally, not a plugin or anything, so you can just use dans as a pure filter and not benefit from the squid caching.
|