Re: RES: [squid-users] No IP in URL

Please always keep the list on Cc!

On Tuesday 06 December 2005 18:29, you wrote:
> I totally agree with you but I can not afford an URL filter. In fact,
> having free access to these kinds of applications is why open source
> software is so successful and popular.

Take a look at SquidGuard. It has a moderately useful list of URLs which
are checked.

I know that many bosses don't want to spend money on it. But the problem
is that even with commercial URL/content filters (which we use at work)
an insane amount of sites is still not classified. I was told that
about 5,000 new domains are registered every day. A single person
just can't deal with that.

Without spending money you have to decide whether you seriously want
to block "bad sites". Solution: whitelisting. That surely will annoy
a lot of people at first. Otherwise you will hardly block more than
the casual stupid user who "accidentally" tries a porn URL. Just tell
your boss how reality looks like and he needs to decide who serious he
is about security. That often results either in "well, it's not that
important - just try your best" or "is it really that bad? heck, try
not to make it too expensive".

Squid is a good, fast and flexible proxy. But when it comes to seriously
enforcing a security policy it just isn't enough IMHO.

 Christoph

-- 
~
~
".signature" [Modified] 1 line --100%--                1,48         All