You can put it on a router and then if the router does dns passthrough which it probably will, all of the clients will be using openDns, but it works as well if you set it on the clients and then make a policy to restrict users from changing it. Bare in mind that if the isp that your deeling with assigns the router a dynamic ip, you'll have to install the openDns client in order for your filtering settings to work across dhcp leases. On 10/03/2011, David Mehler wrote:

Hello,

Thank you. Can you provide more information on OpenDNS? Do you have to put it on a router, as in a wired or wireless router that the dsl or cable modem and pc's go in to or is it on each individual machine?

Thanks. Dave.

On 3/10/11, White, Matt wrote:

...

OpenDNS would probably be the best, free solution in this case; that combined with keeping the users out of the local admin group would cover 95% of your problems. Install MS Security Essentials to hit the virus/malware angle and you should be golden.

On Thu, March 10, 2011 08:02, David Mehler wrote:

...

Hello,

I've got a Windows xp machine that I've received and it needs cleaning. That however is not the point of this email. It got this way because of visits to porn and other adware carrying sites. I'm needing to block this stuff at the pc level. The place it's going the user's do not have the technical know how to go beyound the machine, install another browser, etc. so block it there probably with IE or Firefox and it's gone. I can not purchase new hardware or software for this project and must therefor rely on open source/free tools and techniques.

Some solutions i've tried in the past though this first one is no longer proving effective, has been to drop a hosts file in c:\windows\system32\drivers\etc which contains sites and pointers to localhost. The idea is the redirects won't work. Enabling the popup blocker at maximum as well as the phishing filter is standard in my setups.

On a home router once I deployed a squid proxy with a squidguard antispam redirector, this was marginally effective. I've also deployed the opensource dansguardian content filter, this slowed things down noticeably. I'm wanting to deploy some of these packages on the local machine itself.

If anyone has any suggestions on this issue please let me know.

Thanks. Dave.

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

Hello, Thanks. The router I have here is a Linksys wrt54G. The router I will have at the location this box is going back to is unknown as I don't have it. I'd appreciate any suggestions. Wireless might be nice, but I might not want it on always. Thanks. Dave. On 3/10/11, Brian Moore wrote:

HI. If your router supports specifying the dns servers that dhcp hands out, then you could do it that way, otherwise, you would have to specify their servers on each pc. Only some routers will let you specify which dns servers are handed out by dhcp and some of them will only hand out what the isp gives out.

If you like, let me know what you've got and will see if I can find that answer.

Brian.

On 10/03/2011 9:33 AM, David Mehler wrote:

...

Hello,

Thank you. Can you provide more information on OpenDNS? Do you have to put it on a router, as in a wired or wireless router that the dsl or cable modem and pc's go in to or is it on each individual machine?

Thanks. Dave.

On 3/10/11, White, Matt wrote:

...

OpenDNS would probably be the best, free solution in this case; that combined with keeping the users out of the local admin group would cover 95% of your problems. Install MS Security Essentials to hit the virus/malware angle and you should be golden.

On Thu, March 10, 2011 08:02, David Mehler wrote:

...

Hello,

I've got a Windows xp machine that I've received and it needs cleaning. That however is not the point of this email. It got this way because of visits to porn and other adware carrying sites. I'm needing to block this stuff at the pc level. The place it's going the user's do not have the technical know how to go beyound the machine, install another browser, etc. so block it there probably with IE or Firefox and it's gone. I can not purchase new hardware or software for this project and must therefor rely on open source/free tools and techniques.

Some solutions i've tried in the past though this first one is no longer proving effective, has been to drop a hosts file in c:\windows\system32\drivers\etc which contains sites and pointers to localhost. The idea is the redirects won't work. Enabling the popup blocker at maximum as well as the phishing filter is standard in my setups.

On a home router once I deployed a squid proxy with a squidguard antispam redirector, this was marginally effective. I've also deployed the opensource dansguardian content filter, this slowed things down noticeably. I'm wanting to deploy some of these packages on the local machine itself.

If anyone has any suggestions on this issue please let me know.

Thanks. Dave.

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

Hi, open dns is an option. I haven't seen any routers that don't let you define the DNS but maybe some of the budget units won't. My D-Link lets you set DNS in several locations. Blocking sites though generally isn't worth the effort, to many flase matches. On Mar 10, 2011, at 8:52 AM, David Mehler wrote:

Hello,

Thanks. The router I have here is a Linksys wrt54G. The router I will have at the location this box is going back to is unknown as I don't have it. I'd appreciate any suggestions. Wireless might be nice, but I might not want it on always.

Thanks. Dave.

On 3/10/11, Brian Moore wrote:

...

HI. If your router supports specifying the dns servers that dhcp hands out, then you could do it that way, otherwise, you would have to specify their servers on each pc. Only some routers will let you specify which dns servers are handed out by dhcp and some of them will only hand out what the isp gives out.

If you like, let me know what you've got and will see if I can find that answer.

Brian.

On 10/03/2011 9:33 AM, David Mehler wrote:

...

Hello,

Thank you. Can you provide more information on OpenDNS? Do you have to put it on a router, as in a wired or wireless router that the dsl or cable modem and pc's go in to or is it on each individual machine?

Thanks. Dave.

On 3/10/11, White, Matt wrote:

...

OpenDNS would probably be the best, free solution in this case; that combined with keeping the users out of the local admin group would cover 95% of your problems. Install MS Security Essentials to hit the virus/malware angle and you should be golden.

On Thu, March 10, 2011 08:02, David Mehler wrote:

...

Hello,

I've got a Windows xp machine that I've received and it needs cleaning. That however is not the point of this email. It got this way because of visits to porn and other adware carrying sites. I'm needing to block this stuff at the pc level. The place it's going the user's do not have the technical know how to go beyound the machine, install another browser, etc. so block it there probably with IE or Firefox and it's gone. I can not purchase new hardware or software for this project and must therefor rely on open source/free tools and techniques.

Some solutions i've tried in the past though this first one is no longer proving effective, has been to drop a hosts file in c:\windows\system32\drivers\etc which contains sites and pointers to localhost. The idea is the redirects won't work. Enabling the popup blocker at maximum as well as the phishing filter is standard in my setups.

On a home router once I deployed a squid proxy with a squidguard antispam redirector, this was marginally effective. I've also deployed the opensource dansguardian content filter, this slowed things down noticeably. I'm wanting to deploy some of these packages on the local machine itself.

If anyone has any suggestions on this issue please let me know.

Thanks. Dave.

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins