Comments on: Protecting young (and not so young) eyes

By: matthew

matthew — Wed, 25 Apr 2007 05:05:26 +0000

Good point. I’m all for flexibility myself. I’m going through a lot of pain right now with SMTP because I just had to have more flexibility over our e-mail. And it’s true in IT: what we don’t control, controls us.

You’re right about blacklists too. If a staff of dozens isn’t getting paid to manage a blacklist, it’s not going to be too good. DansGuardian directs people to http://urlblacklist.com/ for their blacklist needs. They are good, but not up to the standard of commercial products.

I have been really pleased with the performance of DansGuardian, with one caveat: it does present a lot of false positives. The day care ladies were looking for breast pumps a few days ago, and of course every page was blocked. With this comment including the phrase, this page may also get blocked. It’s weighted (like SpamAssassin), so you define the threshold. Also, like SpamAssassin, it’s a delicate balance.

I’ve had to tweak a few things. For instance, it was necessary to add Virginia to safe phrases because to DansGuardian, a page with lots of Virginia addresses looks like a page full of virgins.

Other than that, I’ve put it to several tests, and it always passes. I was looking over the logs, and noticed it blocking photos within certain sites because of their filenames. Babe-of-the-week.jpg appeared several times.

With all things Linux, try it out. If you don’t like it, send it back for a full refund.

Thanks for being the first to comment on my blog!

By: David Szpunar

David Szpunar — Wed, 25 Apr 2007 04:42:00 +0000

I’ve seen DansGuardian but I’ve had a hard time believing a list not put together by a company paying employees to make it, coupled with some regular expressions, could do as good a job of blocking, not to mention reporting, as a commercial solution. The commercial solutions I’ve looked at, and continue to look at, include Barracuda and iPrism along with Blue Coat products (www.bluecoat.com). I like Blue Coat the best from a “gut” perspective after reading their website, and I also like their free-for-personal-use computer-based K9 software (www.getk9.com).

With your recommendation, I may look again at DansGuardian as finances are an issue in this purchase for us. Our primary, but not only, need is to block unsavory content from being accessed over our soon-to-be-released free wifi hotspot setup, which is ready to go except for filtering and some documentation.

We also have the fastest, Business Class cable internet service from our local provider :-) However, I’m very glad they don’t provide blocking…that would likely result in an inflexible solution that would affect something legitimate (anything from mail to instant messaging or something). Our Microsoft ISA 2004 firewall provides very good inbound and outbound firewall control (outbound is locked down except for things allowed), and I’d much prefer to also do content filtering under in-house control than farm it out entirely to an ISP!