Blocking Porno Sites and Violent Contents

[savvyuser]

Hi Everyone,

My internet server is windows server 2003. I configured Routing as NAT so that workstations can access Internet. My concern is this, I want to block pornographic sites and violent contents websites. I am administering that server in our school. Is it possible to block porno sites or does it have a tweak in routing and remote access server of windows 2003. Or do I have to acquire 3rd party software for my purpose. If I have to what could you recommend better if it is easy to install/manage and cost.

Thank you in advance.....

 

[Andreh]

For a school I would suggest you will need a 3rd party app like Surf Control. This is very good at filtering porn (and pretty much anything you want to block) and a couple of the customer sites I deal with use it very well. It will also report back who is doing what.

To install it, internet access for your network will need to be redirected through


"Assumption is the mother of all f#%kups!

 

[PalmTest]

The super tool I use in this cases is Naomi.

http://www.naomifilter.org

The only drawback I see is that it has to be installed on the Workstations instead of the server.
The positive thing is, that it is a very simple and very (!!) effective tool.
Once installed, and given a strong password, it needs no further configuration.
It also blocks P2P programs (Kazaa, Gnutella).

The filter inspects the data stream in stead of domain names or site names. When a wrong site is detected it kills the process that initiated it.
Naomi does not use "Add remove programs" and once it runs the process cannot be stopped, unles you provide the correct password and stop Naomi or uninstall Naomi within the tool itself.

 

[ncotton]

I second Naomi, no experience with it, but all the reviews I have read are second to none.

Hope this Helps.

Neil J Cotton
njc Information Systems
Systems Consultant

 

[porkchopexpress]

I've installed Policy Central Enterprise at colleges and schools and it's very effective i'm told.

It will filter porn and all the rest by category but it also scans the users desktop and will look for bad language and pretty much anything else you like in work docs of any other apps. If you like it will screenshot a violation and add username and date.

You can also select groups/classes that can access the internet and schedult them to turn on and off.

This product is not installed directly on the proxy but as an agent on the clients.

http://www.securitysoft.com/policy_central.asp?pageid=18

You know what Jack Burton always says at a time like this...

 

[savvyuser]

Thanks Guys,

I'll try NAOMI first since it is a freeware. Thanks for all your help. It really helps..

 

[sk8ology]

Has anyone heard bad things about running Naomi on a Terminal Server?

 

[58sniper]

Well, I have a concern. If the users are local admins of their workstations, they can get around this.

Never install something on the workstation to handle and enterprise problem if there is an enterprise solution.

I have a church for a client that uses SCM, and it works really well. And you can imagine how they want to make sure things are nice and tidy! Check out

http://www3.ca.com/smb/product.aspx?id=5280&culture=en-us

Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[pgaliardo]

I second 58sniper's concern. Especially at a school. The kids will always pride themselves in outsmarting the admins.

 

[58sniper]

And, they eventually WILL outsmart the admins (no offense). They have all that time on their hands to achieve a single task. You (the admin), have little time to handle many.

Additionally, even a Power User can self elevate (if given the time and effort) to have local admin rights.

Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[Fatboy0341]

I use SurfControl at work and it is by FAR the best filtering tool I have ever worked with. It's not free - but when you consider the ramifications of porn or hate sites or anything else like that being available in a school environment - the budget should definitely provide for the software.

JB

 

[Davetoo]

Fortunately, we run Watchguard products, so I implement this at the firewall level, making it extremely difficult for a user to circumvent (but, alas, it can be done).

Don't rely on client tools, implement a solution higher up (server/firewall)

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.

 

[iconSYS1]

I use a Sonic Wall 2100CF (content filter) for this purpose, works nicely after you get everything configured. We we're one of the first to buy this thing when it came out and I remember dealing with many hours of tech support to get it to function the way it does today. So far I haven't figured out a way around it. It's worth looking into if your budget allows for the $1500 + pricetag.

 

[anthonymeluso]

I use ISA Server 2004. Just look at the logs and search for the word proxy every now and then and your pretty much set. Its not perfect but with a little time you can get some great and accurate results.

Since its on the server level its harder to get around and offers greater security. The secert is show the kids that you do block sites rather than say we are watching what you do and where you go. Of course as with all kids never boast about it, gets then to find ways around it (I.E. proxy web sites)

 

[wahnula]

And, they eventually WILL outsmart the admins (no offense)

Good point. And CA as usual has realistic price points for licensing. Excellent company and suggestion.