filtering internet content

**dfield58** · 09-06-2003, 06:46 PM

I work for a Christian bookstore and we would like to set up a couple of computers for public access (so our customers can look up book reviews, listen to music clips, etc). Knoppix would be perfect, but we do need some sort of internet content filtering - so we don't have little kids visiting all the porn sites

Does anyone already make a customized Knoppix set up for internet kiosk use that includes such filtering? Or, failing that, know how to set one up from scratch?

Thanks

**garyng** · 09-06-2003, 07:03 PM

I don't know what kind of server packages are included in KNOPPIX but what I can think of is a remastering(if needed) that contains the following :

1. A simple firewall that would be the only machine that can go to the internet(SNAT for all lcoal machines, DNAT for all incoming ports so nothing can be pushed into the net)

2. Squid proxy server

3. Dansguardian(content filter for Squid)

In this way, you only need to manage one machine(the firewall/proxy server/filter).

For the rest, just normal KNOPPIX(or if you like change the skeleton of Konqueror/Mozilla to use proxy on fire up) and it would be fine.

**Ghandalfar** · 09-06-2003, 07:24 PM

For the rest, just normal KNOPPIX(or if you like change the skeleton of Konqueror/Mozilla to use proxy on fire up) and it would be fine.

No need for that. Use transparent proxy.

**garyng** · 09-06-2003, 07:31 PM

Originally Posted by Ghandalfar

For the rest, just normal KNOPPIX(or if you like change the skeleton of Konqueror/Mozilla to use proxy on fire up) and it would be fine.

No need for that. Use transparent proxy.

That is again setup through the firewall, I believe(?). Haven't done much about the iptable stuff, it will be on my next assignment. thanks for the information.

Can these all be done with shorewall ?