By: Paul Hill Technology Coordinator Gwinn Area Community Schools.

Post on 27-Dec-2015

213 views 0 download

Tags:

Transcript of By: Paul Hill Technology Coordinator Gwinn Area Community Schools.

By: Paul HillTechnology Coordinator

Gwinn Area Community Schools

What We Will Cover:

• Why use Squid and Dansguardian• How it works• Selecting a version of Linux• Hardware requirements• Installing Linux• Configuring your system1) Install Webmin2) Configure services 3) Configure and start Squid4) Configure firewall for Squid, Dansguardian and Webmin5) Download, install and configure Dansguardian and Blacklists6) Install SARG

• Client setup• Searching log files• Questions

Why Use Squid and Dansguardian:

Reduces Internet Traffic

Customizable Filtering

Logging Capabilities

CIPA compliant

FREE!

How it works:

Dansguardian running on port 8080

Squid running on port 3128

Internet

Selecting a Version of Linux:

Use a distribution of Linux that is popular.

Select a distribution that is supported by your hardware

Hardware Requirements:

• Depends on the Linux version you choose.

• Most smaller applications require only a desktop computer with some additional memory. Faster hard drives will improve performance.

• Hardware requirements are usually less than other operating systems.

•Check HCL for the version of Linux you decide to use.

•Many versions of Linux will also run on a virtual machine.

Installing Linux:

ALWAYS DO A CUSTOM INSTALL. This will allow you to select which components to install.

Linux Components that you will need to install:

Applications DevelopmentEditors Development ToolsInternet Development Libraries

Server Base SystemServer Configuration Tools Administration

ToolsWeb Server Java

System Tools X Windows System

Once your install is complete make sure to update your system!

Configuring your system:

1) Installing Webmin

Download the Webmin application from www.webmin.com

Install Webmin package

Open browser and go to 127.0.0.1:10000

Configure Webmin for SSLFor SSL to work you will need to install NET::SsleayConfigure Webmin to use SSL

2) Configure services

3) Configure and start Squid

Edit Squid configuration using text editor (\etc\squid\squid.conf) or use Webmin.

a) Configure Squid Access Control

b) Configuring Proxy restrictions

At this point you are ready to start Squid!

4) Setup firewall

5) Download, Install and Configure Dansguardian

Download Dansguardian RPM (if available)Dansguardian website is dansguardian.orghttp://dag.wieers.com/rpm/packages/dansguardian/

Run Package

Download Webmin module for DansguardianNote: Make sure the version works!

Install/Configure Webmin module

Download and expand blacklists

Configure Dansguardian

a) Configure Webmin Module

b) Install Dansguardian Webmin Module

c) Dansguardian Webmin Module

d) Install Blacklists

Download blacklists from urlblacklist.com

Move file to /etc/dansguardian folder.Expand files tar –xzvf /etc/dansguardian /bigblacklist.tar.gz

e) Blacklist Categories

f) Configure Dansguardian Module

It is a good idea to start Dansguardian at this point.

g) Configure Dansguardian Filter Groups

In Dansguardian you control access by editing groups.

h) Configure Filtering Lists

This is where you control what is filtered by blacklist categories or manually. Note that some categories listed here do not have corresponding blacklists and this will cause problems. Make sure to restart Dansguardian to apply any changes you make.

6) SARG Setup

•Download/Install SARG•Configure SARG

SARG Reports

Before you can view a report in SARG there must be a report that is generated. Normally this is done automatically according to the schedule you setup.

Client Setup:

Searching Log Files:

Searching Log Files: User Access

Searching Log Files: Topsites