Fedora 24
Sponsored Link

Squid + DansGuardian
2016/06/23
 
Install DansGuardian to configure contents filtering.
[1] Install DansGuardian.
This example based on the proxy settings on Clients with [prox.srv.world:3128]. Replace the value to your own environment.
[root@prox ~]#
dnf -y install dansguardian
[root@prox ~]#
vi /etc/dansguardian/dansguardian.conf
# line 26: change to your own lang

language = '
japanese
'
# line 88: change it (DansGuardian listens) to the port for Clients

filterport =
3128
# line 94: specify the port which Squid listens

proxyport =
8080
[root@prox ~]#
vi /etc/squid/squid.conf
# line 59: change (same with DansGuardian's setting)

http_port
8080
[root@prox ~]#
systemctl restart squid

[root@prox ~]#
systemctl start dansguardian

[root@prox ~]#
systemctl enable dansguardian

[2] Configure for filtering.
[root@prox ~]#
vi /etc/dansguardian/lists/bannedsitelist
# specify domain names you'd like to block

example.com
[root@prox ~]#
systemctl restart dansguardian

# other lists you can define
bannedextensionlist
⇒ banned edextension

bannediplist
⇒ banned client IP address

bannedmimetypelist
⇒ banned MIME Type

bannedphraselist
⇒ banned phrase

bannedregexpheaderlist
⇒ banned header(regexp)

bannedregexpurllist
⇒ banned URL(regexp)

bannedsitelist
⇒ banned domain

bannedurllist
⇒ banned URL

contentregexplist
⇒ replace contents(regexp)

exceptionextensionlist
⇒ exception extension

exceptionfilesitelist
⇒ exception file domain

exceptionfileurllist
⇒ exception file URL

exceptioniplist
⇒ exception client IP address

exceptionmimetypelist
⇒ exception MIME Type

exceptionphraselist
⇒ exception phrase

exceptionregexpurllist
⇒ exception URL(regexp)

exceptionsitelist
⇒ exception domain

exceptionurllist
⇒ exception URL

filtergroupslist
⇒ filter group

greysitelist
⇒ grey domain

greyurllist
⇒ grey URL

[3] Try to access from ClientPC with Web browser to the URL you configured and make sure it is redirected like follows.
Matched Content
 
Tweet