Re: [cobalt-users] blocking software

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Yohans Mendoza wrote:

> hi all,
> what are isp's using to block porno to their clients when they request it?
> I'm interested on server side solutions rahter than clinet side such as
> net nanny and cyberpatrol.

While we don't do it, here's what we'd do if we did do it:

First of all, you have to understand that this will only work for our
customers who are dialed in through our own RAS systems, and not for
anyone else.

When we authenticate (via Radius), we'd have a rule set for that
customer that would block all port 80 access (and other ports for news,
etc.) going outside our network.

We'd set up a proxy server on our own network to proxy ALL httpd
requests (and perhaps all News, etc., requests).  We'd set up filter
rules on the proxy server.

And let our customer know that the ONLY way he can browse, read news,
etc., is through our proxy server.

Rather complex.

And you'll NEVER be up-to-date.

And you'll block something that should have been allowed, and you'll
always allow something that should have been blocked.

So we don't offer it.  We don't do it.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
nobaloney.net
P. O. Box 52672
Riverside, CA  92517
voice: (909) 787-8589  *  fax: (909) 782-0205