Questions[dansguardian](server)

I am using DansGuardian. However, when I am visiting fm.baidu.com, which running some AJAX and also Flash, and also loading lyrics, and also some audio files, the page is fine, but audio is not running at all.

My question is, how to know which elements were blocked, such as which Javascript file, or audio file itself, or anything? So that I can add them to the exception list.

We have contentregexplist file where we can write all substitutions like "source regex"->"dest string"

And they ALL run for each page. Is it possible somehow to define a domain name(s) for which (only for 1 domain! not every page) some regexps should be looked for?

To be clear:
How to replace "Google"->"garbage" in page source only for host host.example.org?

May be other content filtering system can do this? Then which one?

I'm having a trouble with squid (and dansguardian) in my network that slows web page browsing.

I'm focused now in the DNS queries - i think the DNS can share part of the blame. I've observing my machine with wireshark and the server with tcpdump.

I'm observing that, when i request a page, my machine tries to resolve the name and the squid server also does the same. Is this a normal behaviour ? Shouldn't my machine forward the request to the proxy and then the proxy server resolves the name and makes the request to that web page ?

My Firefox (if I make a mistake in the web page name) stays 30 seconds (i guess this has something to do with dns timeout) blocked (but really blocked) until the proxy server sends a default squid page of domain not found...or until the DNS resolves the query..

My question is only if my machine and my proxy server really have both to make the DNS query or it should only be the proxy server...

Thank you.

Is it possible to have a squid dansguardian configuration in the below manner,

BROWSER --> SQUID --> DANSGUARDIAN --> INTERNET

We currently have a sandwich SQUID-DG-SQUID configuration. Just wanted to know this out of interest.

Thanks.

I am looking for some words of wisdom from the members of this forum.

I do consulting work for three related non-profits in the same building. The three have decided to share the same internet pipe and have tasked me with building a new gateway box. I plan on purchasing a 1U SuperMicro Atom box with an add-in card for a total of 6 physical network ports.

The gateway would be used to split the internet between the non-profits, provide some basic traffic shaping, and filter content using DansGuardian.

Right now I am trying to figure out how to set up the software and would like some advice. Some options that I see are:

1. Install Ubuntu directly onto the box and use iptables, Squid, and DansGuardian to do all the tasks. I have done this before and am familiar with the setup.

2. Install ESXi on the bare-metal and run an Ubuntu VM to do the above.

3. Install ESXi on the bare-metal and run a pfSense VM for the firewall/router and pass port 80 packets to another VM running Ubuntu with Squid and DansGuardian. I have not used pfSense before but it seems like I could pick it up quite readily.

If I do option 3 are there any thoughts on running 3 separate Ubuntu VMs so that each non-profit would have its own DansGuadian instance instead of running one instance and using filter groups.

There would be about 50 users on one network, 20 on the second, and 5 on the third. The internet pipe is a 50Mbit down/12Mbit up cable connection.

Any advice on the above or other options that anyone would recommend would be appreciated.

Thank you.