The web filter is fully customizable to block only the selected contents in the network the DNS servers are used. Those filtering customizations are on the other hand only available for free or paid OpenDNS account owners and not for users who have simply switched their DNS servers to the provider.

OpenDNS FamilyShield has been designed for families who want a ready to run solution. The DNS servers come with family friendly filtering activated so that account creation and configuration is not necessary.

Filters to block adult contents, proxies and anonymizers are automatically active after changing the DNS servers to the FamilyShield IPs.

DNS servers have an advantage over parental control software as they can be configured on a computer system or router. All devices that use the router to connect to the Internet are benefiting from the web filtering and additional security. Parental control software on the other hand can only be installed on supported computer systems and not devices such as Microsoft’s Xbox 360, Sony’s Playstation 3, Nintendo’s Wii or 3Ds as they are usually operating system specific.

The DNS server IPs that need to be used are 208.67.222.123 and 208.67.220.123. These need to be entered into the router configuration or computer configuration, depending largely on the network setup and situation.

opendns familyshield

The OpenDNS Knowledge Base contains information on how to setup the DNS servers on various operating systems and devices.

Advanced users might prefer the manual approach by creating an account to block only specific web contents. Families on the other hand can use the DNS servers to install a solid web filtering solution without the hassles of configuration.

And don’t get my reason for using DansGuardian stop you from thinking this server could be used in other deployments. DansGuardian could be used for schools, businesses, internet cafes, etc. With that in mind let’s see just how easy this is to get running.

I installed DansGuardian on a Ubuntu Server 8.10 installation. The installation took me all of approximately 2 minutes. The complexity of the configuration of DansGuardian will depend completely on how much you need to ban.

Installation

The first thing to do is get to the command line of your server and issue the following command:

sudo apt-get install dansguardian

The above command will install the filtering system. But you’re not finished because DG requrires another tool, tinyproxy, to act as a proxy server. To install tinyproxy issue the following command:

sudo apt-get install tinyproxy

Now you’re ready to configure.

Configuration

You could start up both DansGuardian and tinyproxy now and set up your browsers to use the proxy server right now. But you might want to take a visit to a couple of .conf files as well as the banned lists for DansGuardian. You will find the configuration file for DansGuardian in /etc/dansguardian. Open this up and take a look around. The most important configuration of this file is to make sure all the ports match up. In my installation both DansGuardian and tinyproxy were set up for port 8080. Perfect.

If you have a specific need for your network, make sure you go through both configuration files, which are set up very clearly and are well commented.

The next step is to take a look at the /etc/dansguardian/lists directory. In this directory you will find nearly every type of banned list you will need. The three most popular lists are:

• bannedsitelist
• bannedurllist
• bannedphraselist

The difference between bannedurl and bannedsite is with bannedurl you are able to ban only part of a site and with banndsite you can ban an entire site. The banned lists are set up very clearly. For instance, if you want to ban a site you would see this in the bannedsitelist:

# List categorisation
#listcategory: "Banned Sites"
#List other sites to block:
badboys.com

You can list any IP you want in this section. The bannedphraselist configuration looks like this:

# To block any page with words that contain the string "sex". (ie. sexual)
# <sex>

You would uncomment out the second line from the above. Again, this configuration file is commented very well so it will be easy to set up.

Starting the Services

First start up tiny proxy with the command:

sudo /etc/init.d/tinyproxy start

Now start DansGuardian with the command:

sudo /etc/init.d/dansguardian start

Configuring your browsers

This is very simple. What you need to do is configure all the browsers you want to go through the content filter to use the IP address of the DansGuardian server as their proxy server.

Final Thoughts

If you have ever wanted to use a content filtering server but didn’t want to have to spend hours setting one up, DansGuardian is your solution. Not only is this solution simple, it is reliable and easy to maintain.