2012-02-13 - Re: [GRASE-Hotspot] squid and opendns

Header Data

From: Oscar Saiz <os***z@telefonica.net>
Message Hash: eb1602c1afae73cb199b882dfe2cc0633a3eceea53f073c2a37bf087a6488769
Message ID: <4C39BF4F308A4C25A37333118CBAF4E9@PC>
Reply To: <4F38B091.4000803@gmail.com>
UTC Datetime: 2012-02-13 08:52:22 UTC
Raw Date: Mon, 13 Feb 2012 16:52:22 +0100

Raw message

Since last squid change, I’m trying to configure two ACL in squid.conf.grase and I can’t do it. One for avoid to search some words (like sex, porn...) and other to avoid that users can download some files. (.exe, .com...) It worked in the past (previously version) but not now.
I want to do that because as you know I’m using OpenDns family filter and if you write in google some words like porn, sex and then you push in images and you can see them. I would like to avoid it. And It was working previously.
I tried to add the ACL in squid.conf.grase and squid.conf and it doesn’t work.
Regards
On 11/02/12 19:01, Oscar Saiz wrote: 
  Hi Tim,
  firstly thanks for your answer and It’s clear for me now but I have others questions.
  You say that the “Grase Hotspot is installed with OpenDns family filter” but should I configure my DNS router too or it’s not necessary? I don’t know if it’s possible that someone could change his DNS and he could avoid the OpenDNS.
  Second thing is that I’ll use your Grase Hotspot in a little school and I think that I’ll had about 300 people trying to connect to the Internet. Could I still use this OpenDNS? Because I don’t know if it is only for home network.

There are some firewall rules built into the Hotspot, so if someone tries to use another DNS server, it transparently forces them to use the local one. So no settings need to be changed on your router.
Regarding using the OpenDNS Family filter. I was unable to get an answer from the last time I contacted them, so have been including it as the default DNS pending a response from them. I'll try and track it down again. You are probably best off looking into their "paid" services, which I'm sure includes discounts for schools. (On their main page, they boast that 1 in 3 schools in the US use them, so who knows, maybe they provide it free?)
I've opened a ticket to again try tracking down an answer about OpenDNS being included by default, and who can use it.

Tim

Thread