Proxy and Content Filter

BlazeStar

Hi guys,

I'm new to pfSense and I have a few questions about proxy and content filter.

Previously I was using latest versions of SQUID and SQUID GUARD on a CentOS machine.

Now using pfSense 2.1.5-RELEASE (amd64) I see a lot of different packages which could provide me with a proxy and content filter.

I want to use SQUID as a proxy, I guess most people would recommend that, but then which package should i use to best work with pfSense ?

squid
squid3
squid3-dev

And concerning the content filter, which do you suggest?

I know about SQUIDGUARD, I hear about DANSGUARDIAN…

I read a few threads about that but most of them were very old.

So concerning the current version, which one is best for use with pfSense ?

I can't find any recent, interesting info on that.

Also, if I were to choose SquidGuard, which one should I use?

squidGuard
squidGuard-devel
squidGuard-squid3

Thanks guys !!!

BlazeStar

so I decided to go with SQUID3 and all is good.

I'd just like to know if I should choose SQUIDGUARD or DANSGUARDIAN for a content filter.

I just want to have a website blacklist and ideally custom block pages.

Thanks!

heper

squidguard is an urlfilter (it just checks url-blacklist/whitelist for a match –> not a content filter)
dansguardian scans the websites for content and with the use of a set of parameters you can configure it to allow or block the page. in addition it ALSO does urlfiltering on the side)

depending on what you want to do you can pick on or the other.

do note: urlfiltering uses "little" cpu/memory. Content filtering has much higher requirements.

BlazeStar

@heper:

squidguard is an urlfilter (it just checks url-blacklist/whitelist for a match –> not a content filter)
dansguardian scans the websites for content and with the use of a set of parameters you can configure it to allow or block the page. in addition it ALSO does urlfiltering on the side)

depending on what you want to do you can pick on or the other.

do note: urlfiltering uses "little" cpu/memory. Content filtering has much higher requirements.

Thanks for clearing that out!

That's exactly what I was wondering… the difference between both.

Well I only need to filter URL, I don't care about the content.

i want to block time-blackholes such as Facebook, YouTube and such.

I was also wondering if there's an efficient way to block SKYPE and various messager apps?

rocaembole

I would choose squid + squidguard in non-transparent mode

It is lightweight, functional and easy. There are many tutorials and many different ways to do what you want to do so depends on you!

You can block domains like facebook.com and youtube.com with target categories.

But if you want a proxy in transparent mode + block https then you should pick up squid3

cheers

Powered by google translate

BlazeStar

I don't want it in transparent mode because I want to activate authentication

However I want to filter HTTPS too.

So I'm already running SQUID3, I'll start to integrate SQUIDGUARD !

Thanks all!