[CentOS] web filtering for remote computers

Jake jakepaulus at gmail.com
Fri May 22 11:56:46 UTC 2009


On Fri, May 22, 2009 at 12:55 AM, Dhaval Thakar
<dhaval.thakar at networthdirect.com> wrote:
>
> John R Pierce wrote:
>> Dhaval Thakar wrote:
>>
>>> Hi,
>>>
>>> I am using Squid for local users since two years & is working fine.
>>> I am trying to implement web filtering for remote computers e.g few laptops & branch / franchise computers on dynamic ips.
>>>
>>> I do not want to use Squid proxy for it, if all remote computers will use Squid from my public ip, bandwidth utilization will increase.
>>> Need valuable suggestion to achieve this.
>>>
>>>
>>
>> how are these remote computers connected to the network, and what OS are
>> they running?
>>
>>
> all are windows clients
> connecting through internet using dynamic ips.
>> filtering, by necessity, has to be between the user and the thing you
>> want to filter.
>>
>
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
>

Good morning:

If your needs are simple (e.g. you are able to apply one filtering
policy to roughly all users at the same time and you aren't concerned
with per-user reporting on usage for accountability, etc.) you can try
OpenDNS. I just use this service for normal name resolution but they
have a filtering service as well.
http://www.opendns.com/solutions/enterprise/filtering/

Of course you can get around this filtering scheme but then no web
filtering technique is fool-proof...and blocking outbound dns requests
to all resolvers except the IP addresses of OpenDNS (there are just
two to put in your firewall) would go a long way towards preventing
users from escaping the filter.

-- 
Jake Paulus
JakePaulus at gmail.com



More information about the CentOS mailing list