Content Filtering on CF

databeestje

Well, interpreting the license allows us to make the package available at least. And we may even include it into pfSense. The problems start when people start installing dansGuardian on site.

I want to make it part of a unix-like distribution such as RedHat.
Yes.
I want to try it out for potential commercial use.
Yes, but only once.
I want to use it commercially[2].
No, you must buy a download licence.
I want to incorporate it into our product or solution.
No, you must buy a solution provider download licence.

databeestje

On that note, we have a squid package that can do transparent proxy well now. However we are currently missing a no-cache option iirc.
And we also have a dansguardian package available from the menu. Although this is currently not tested.

buraglio

How about something with not-so-hinky of a license like http://www.squidguard.org/ ? I have no experience with it but I know some folks that swear by it.

vhodges

I am on board with the original poster.
I will contribute $150.00 USD for Squidguard or dansguardian in the embedded release.
That is the last thing that I was looking for in a firewall/router for light office and home use. I was using IPCop (WRAPCOP) for this until I found pfSense and found it to be a better solution other than filtering.

databeestje

Very well, I'll need to see what can be done, from the looks of it we need squidguard to make proper filtering work.

However, with regards to a embedded release I assume you have a large(r) cf to account for the extra size squid and friends bring with them. This would require at least a 256MB CF if you still want to be able to make it firmware upgradable on the CF.

Also, the squidgard database files need a proper spot where they can live.
It's not impossible, just hard(er).

I'll see if a can conjur a working configuration on a normal install first. I have no ETA at this moment but I need a month at least.

buggs1a

I just want to chime in and say I'm very interested in a web filter that has a list of categories and block list downloads etc to block certain stuff. It's just for my home network, not commercial at all. I'd like to be able to do filtering by clicking on a category to block such as hate, violence or whatever and be able to use keywords too.

databeestje

The current blacklisting and whitelisting in the squid package version p8 and later should work.

doc_holiday

I'll contribute $50 to the bounty for a content filtering feature similar to Dans Guardian.

It should be noted that squid+squidGuard (or DansGuardian) are very memory intensive. Since most WRAP and similar embedded devices are limited in the amount of memory available, this is going to be a severe limitation. I've used squid+squidGuard for a number of years now, so believe me when I tell you that putting such a solution onto the pfSense embedded platform is going to be no small feat.

databeestje

You say embedded, but I gather you refer to something with a harddisk in it like a nexcom.

A soekris 4801-60 with squid and squidguard might work. But all bets are off.
A nexcom with 1 GB of ram and disk should be fine. Consider a normal install on a disk (with swap) or CF (without swap) and enable the serial console from the menu. Then transplant the disk into your "embedded" box.

It also allows you to install packages.

sullrich

@buggs1a:

I just want to chime in and say I'm very interested in a web filter that has a list of categories and block list downloads etc to block certain stuff. It's just for my home network, not commercial at all. I'd like to be able to do filtering by clicking on a category to block such as hate, violence or whatever and be able to use keywords too.

This section of the forum is for people contributing money.

We understand you are interested in this but with all due respect stop posting in the bounty area!

doc_holiday

Having just deployed my first PFsense box and I really like what I see! I'd be happy to increase my contribution to the bounty to $100 for a Dan's Guardian type content filtering system for pfsense. I need to buy a commerical product anyhow for the kiddies and I would rather plow it into a great cause like pfsense.

Ryan

I would contribute $200 to anyone thats gets a dansguardian (or equivilent) content filtering working on PFsense. I am really only interested in a Generic PC build, so embedded or not is of no concern to me. I am mainly interested in 3 things. 1: Blocking adult websites. 2: Blocking websites based on custom word search (Searching html for the word "AOL", "garbage" ect) 3: Making it fairly easy for an idiot like me to use. I mean a stright forward web configurator.

As a side note. I would also be willing to pay more to have the ability to email an administrator with a report of users who attempt to go to blocked sites more than x number of times a day. I really don't even care if this would have to run on another machine. I will pay at least $50 for this additional feature. More if i have the money.

PFsense is a great product. Lets work together to make it even better.

doc_holiday

@Ryan:

I would contribute $200 to anyone thats gets a dansguardian (or equivilent) content filtering working on PFsense. I am really only interested in a Generic PC build, so embedded or not is of no concern to me. I am mainly interested in 3 things. 1: Blocking adult websites. 2: Blocking websites based on custom word search (Searching html for the word "AOL", "garbage" ect) 3: Making it fairly easy for an idiot like me to use. I mean a stright forward web configurator.

As a side note. I would also be willing to pay more to have the ability to email an administrator with a report of users who attempt to go to blocked sites more than x number of times a day. I really don't even care if this would have to run on another machine. I will pay at least $50 for this additional feature. More if i have the money.

PFsense is a great product. Lets work together to make it even better.

I should have said that I am only interested in a Generic PC Build as well, especially if this would simplify the deployment.

MrMoo

@databeestje:

Well, interpreting the license allows us to make the package available at least. And we may even include it into pfSense. The problems start when people start installing dansGuardian on site.

Its more misleading than anything. The author is saying you cannot download the software from him for commercial use. You can download for non-commercial use. After downloading for non-commercial use it uses the GPL license which means you can now use it for commercial use. So you can download from Debian's ftp size and have no issues.

Strange.

This thread is for posting a bounty and conversation regarding work being done on that bounty. It is NOT for discussion of various content filtering technologies. Please do not pollute this thread with non-relevant discussion.

For reference, if you have not posted a bounty relevant to the topic, or will not post a bounty relevant to the topic, please take your discussion to Packages.

doc_holiday

@submicron:

This thread is for posting a bounty and conversation regarding work being done on that bounty. It is NOT for discussion of various content filtering technologies. Please do not pollute this thread with non-relevant discussion.

For reference, if you have not posted a bounty relevant to the topic, or will not post a bounty relevant to the topic, please take your discussion to Packages.

I have started a thread for those interested… http://forum.pfsense.org/index.php/topic,3660.0.html

guybrush

ok, let´s help a little.

i´ll add $50,- if this feature is included for embedded devices (in my special case: WRAP).
maybe í´ll be able to give the devs something back…

or you´ll wait until i´ve finished my bachelor degree, so i´ll raise my bounty ;D ;D

cheers,
hannes

DignionASP

I raised the bounty with $175 If Content Filtering is seen in a little easier way.. (CF)

http://forum.pfsense.org/index.php/topic,3660.msg23800.html#msg23800

PFsener

@submicron:

It should be noted that squid+squidGuard (or DansGuardian) are very memory intensive. Since most WRAP and similar embedded devices are limited in the amount of memory available, this is going to be a severe limitation. I've used squid+squidGuard for a number of years now, so believe me when I tell you that putting such a solution onto the pfSense embedded platform is going to be no small feat.

Not all embedded hardware has limited RAM. I have a TNet Pro 1000 with 512 MB RAM that is expandable, but has a 256 MB CF card.

Great to see this thread come to life!

Take care -

PfSener