I am looking for a parental control for my home computers. I want something simple and do not want to go through the elaborate setup of Dans Guardian + Squid. I am currently using WOT with Fox Filter on Firefox ; but Fox Filter has it’s limitations for the free version.
Recently i found that mobicip.com supports the linux platform for their parental controls but found from their support team that they only support Ubuntu as of now and do not have plans for OpenSuse support. They are pretty much in lines of K9 or Norton family. Is there anything similar for Opensuse that i can get ?
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
I’ve heard of some using OpenDNS (opendns.com) for things like this.
Keep in mind that if you have physical access to a machine whose only
restrictions to the Internet are located on that machine (and not
something between that machine and the Internet) it can be circumvented in
some way. For young children this probably isn’t a problem but don’t
expect it to be perfect protection.
Good luck.
ddas4 wrote:
> I am looking for a parental control for my home computers. I want
> something simple and do not want to go through the elaborate setup of
> Dans Guardian + Squid. I am currently using WOT with Fox Filter on
> Firefox ; but Fox Filter has it’s limitations for the free version.
> Recently i found that mobicip.com supports the linux platform for their
> parental controls but found from their support team that they only
> support Ubuntu as of now and do not have plans for OpenSuse support.
> They are pretty much in lines of K9 or Norton family. Is there anything
> similar for Opensuse that i can get ?
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/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=pC/d
-----END PGP SIGNATURE-----
Hi
What about using opendns’s services?
or
http://kb.mozillazine.org/Parental_controls
–
Cheers Malcolm °¿° (Linux Counter #276890)
SUSE Linux Enterprise Desktop 11 (x86_64) Kernel 2.6.27.37-0.1-default
up 3 days 11:49, 2 users, load average: 0.16, 0.14, 0.10
GPU GeForce 8600 GTS Silent - CUDA Driver Version: 190.18
Dansguardian is what you want. DansGuardian - True Web Content Filtering for All
To get the openSUSE rpm you need this repository: Index of /repositories/server:/proxy/openSUSE_11.1 or Index of /repositories/Education/openSUSE_11.1
Please read the dansguardian howto. DansGuardian - True Web Content Filtering for All
You will need squid, which is a proxy, to make this work.
There are also Firefox plugins https://addons.mozilla.org/en-US/firefox/search?q=paren
Now keep in mind, that once you do this, you will want to disable the menu’s so the users can not disable the content filtering.
Here is a rough draft for openSUSE 11.1 Setting up Squid NTLM DansGuardian Sarg - openSUSE
I have set this up a few times. Let me know if you get stuck.
You may also want to add this Firefox extension: https://addons.mozilla.org/en-US/firefox/addon/14365
And you may want to read this: Firefox Lockdown Information - pcc-services.com
What about Glubble for Firefox?
At my house, I have an old (PIII 700Mhz) machine with 2 NICs running IPCop Linux and DansGuardian Add On. It is set right off of the modem (DSL, but I think it handles dial-up as well) so ALL computers on the network is filtered.
I thought this would be better because if somebody uses a LiveCD/LiveUSB then they can easily bypass the local settings regardless of what OS it is running. Not to mention, if somebody brings in their iPod, iPhone or Laptop and connect wirelessly then they too will be filtered as all internet activity goes through this IPCop box.
Plus there is logging, though you have to do a little extra to have it keep track of who is making what request, but it will log the request and such.
It is very quick to set up (like 20 minutes full installation including answering questions and such) and just keeps running and running.
I would love to find a way to run it on a much smaller, more energy efficient system but otherwise there are no complaints. Even my 700MHz system is a little bit of overkill, but it is what I have available. Would rather the low-power-consumption of an Atom chip system (Nettop), but if 700MHz is too much, the 1.6 GHz is WAY overkill.
I have tried Glubble before. I personally didn’t like it. I found it annoying and didn’t work as well as dansguardian.
Hasn’t worked for me either (even on Windows), but I thought I would toss it out there anyway.
ddas4 wrote:
> I am looking for a parental control for my home computers.
my personal opinion is to place children’s computers in a common space
with screens facing the center of the room…install carpet and sneak
up on’em…with a stick in your hand…and if they are
doing/reading/watching/ect something they are not supposed to whack’em
and revoke their computer license for 24 hours…next time withhold
food and water for 24 days…they will soon understand!
another way to say that is: no matter what you install (with idea of
turning your parental responsibility over to software) you will soon
learn that pimple faced kids are smart enough to get around whatever
software mankind can write…
don’t believe me, ask around!!
–
palladium
Have a lot of fun…
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
24 days seems just a little extreme… at least for water. food maybe
okay… 
palladium wrote:
> ddas4 wrote:
>> I am looking for a parental control for my home computers.
>
> my personal opinion is to place children’s computers in a common space
> with screens facing the center of the room…install carpet and sneak
> up on’em…with a stick in your hand…and if they are
> doing/reading/watching/ect something they are not supposed to whack’em
> and revoke their computer license for 24 hours…next time withhold
> food and water for 24 days…they will soon understand!
>
> another way to say that is: no matter what you install (with idea of
> turning your parental responsibility over to software) you will soon
> learn that pimple faced kids are smart enough to get around whatever
> software mankind can write…
>
> don’t believe me, ask around!!
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iQIcBAEBAgAGBQJK9FNmAAoJEF+XTK08PnB5wlkP/0V5Mpsgd4TyrYRUI/Ao8hKb
rNZXYi7i+Gl/UY8dcgckKGW5iOJd54RElwsWnTm1+Z9WQrUShW1AY27IAJSC5dnf
ZF7YjYBt60baHhsCDyCLGssOJa2SFj3UzSAcBe7O9jRFQAcKh9ZuFRJYQpofQSim
bkFIF30/8wt+QN/g1ewH+1+PIvs+Ozp5n34nkptlqt46fsoFJve1YMCti3/qxtY5
cBv9AVUT0unzmtol8qSmzCQGxsiVAGmD8hcPWY3d4xU6lC9IVM8CCjRVLJRnfTsg
92dloIu6jddj+NwhDIE56vLu2pozwLwPJ/aAU+MYg5TaMZv0fNPPp+ehoWJyJV8R
aw6KBNUT9akacrnx1t/ObfapWjkBopVnlxmQnr9aO3QjSq5OEV4U8aFdNUtLouts
1k7tcq6+5Mletbqk5a74MT23hnUqjcQ+Zdnyx1tjlx7T38tSRimeKsL9hPNzeYZj
B95zPPT8+sIrJzLWi/JgEmoUZDSxWAOyi+NdGTkGbryVL+wricvNdTzzUBpALwRz
kCAn2VA315Sar07dJs5NeqXlA7726ypRcmeNmhqoWz2rSCVQhSyq2Mq4eObA5ZDB
sCYC+Aox+wBWxmdY4vouXt7KXGrXLelFHxBFi/dZbf9rtjHuXFEphPNX5XqaBUoC
IVCwnHwTi9OLG+YSwN2x
=0tyt
-----END PGP SIGNATURE-----
How about that oldfashioned way, have a talk with your kids on the issue? If you believe in educating kids by restricting them the way you’re thinking of you’re gonna be disapointed, they will most certainly always be way ahead of you on those matters, and they’ll find new ways to access what you forbid them to access. Don’t try to use technology for this!
Yes, technology isn’t the answer. Parental controls is not the only answer to it, but it is a tool that HELPS.
As you said, “they will most certainly always be way ahead of you …” which means these controls may help to keep them from getting TOO far ahead before being noticed/detected/caught and give the parent a chance to talk with them about WHY you don’t want them to go or view something. It’s a little harder when they have images of giggling body parts in their head!
Would it be better to not know when they are going somewhere or doing something?
My son (5 or 6 at the time) and my youngest daughter (3-4) were sitting in front of the computer in the living room. I was cleaning up around the house (no vacuum, just straightening things). I heard my son ask his little sister “Want to see what is on fairies.com?”
For him it was an innocent question and idea. He was doing it for his sister. And while I don’t know what fairies.com is like, I would rather not have the “WhiteHouse.com” situation[1] crop up, and so I quickly scooted over to where they were. This time I didn’t have to worry about it, because his spelling wasn’t so good, and they immediately returned to where they were without me having to say something.
It is helpful, since they will explore things on their own, to know there is that one layer of protection there to help me.
[1] Whitehouse.gov is the Government building’s website, while WhiteHouse.com is, or at least was, a porn site.
Setting the limits at your home network is one thing, but how about the instantly expanding mobile world? Okey setting limits at home is surely good, but you’ll still have to handle the reality outside your bunker!
Yes, and that is why I never said this replaces talking and being involved with them, it is a tool to HELP. Saying “talk to them” is no magic bullet either.
How many people have seen the “rolling eyes” when somebody is talking to a kid (whether it is yours or somebody else’s doesn’t matter). Just “Talking” with them is not going to be enough, unless they “hear” you and are listening.
Like in my example, if I wasn’t fast enough (and he knew how to spell correctly) the filter would have helped.
As he is getting older the conversations are more and more serious but at age 5 I don’t think it’s time to go into those conversations yet.
I already have a mental list of his friends more likely to cross that line. It doesn’t mean he can’t see them, though. It means when I am listening about what they did, I have to keep different key words and actions in mind. What might trigger a flag from one friend isn’t necessarily going to trigger a flag from another of his friends.
This goes for his sisters too.
Thanks a lot for all your responses.
I have tried everything possible on firefox and decided not to try it through squid/dansguardian. I took the opendns plunge today ; set up an account and installed ddclient through the openSuse repo. However, web content filtering does not seem to happen. This is what my /etc/ddclient/ddclient.conf looks like :
daemon=300 # check every 300 seconds
syslog=yes # log update msgs to syslog
mail-failure=root # mail failed update msgs to root
pid=/var/run/ddclient.pid # record PID in file.
ssl=yes # use ssl-support. Works with
# ssl-library
##
## OpenDNS.com account-configuration
##
use=web, web=whatismyip.org
server=updates.opendns.com
protocol=dyndns2
login=myloginname
password=mypassword
my.labelname
my.labelname is the LABEL on opendns.com website and is per instructions at
http://forums.opendns.com/comments.php?DiscussionID=3018
and
http://www.opendns.com/support/article/192
.
Will greatly appreciate your help. I am getting close.
You need to point your dns resolution at opendns servers, ddclient just updates your ip to attach the account.
As for how to configure several ways depending on how you’re updating your resolv.conf. You may need to change it in the router or tell the system not to over write as for the exact way not sure. But have a look in yast around the networking bits, it will probably be set to auto and be using the isp’s dns servers from the router.
To find out…
dig google.com
; <<>> DiG 9.6.1 <<>> google.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4881
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;google.com. IN A
;; ANSWER SECTION:
google.com. 94 IN A 74.125.53.100
google.com. 94 IN A 74.125.67.100
google.com. 94 IN A 74.125.45.100
;; Query time: 21 msec
;; SERVER: 208.67.222.222#53(208.67.222.222)
;; WHEN: Sat Nov 7 14:56:42 2009
;; MSG SIZE rcvd: 76
You’ll notice I’m using opendns here the primary and secondary addresses are on the bottom of the pages at opendns.
If this isn’t enough I’ll poke a bit more and give some specifics.
Straigh from my heart. I still feel good about the fact my eldest son told me he “hit” a porn site by mistyping. He told me !! So I know what he was shocked by.
I’ve managed a network in a school for a while. There was this bunch of about 20 kids (out of 1200) who made it a sport to get around all the net blocking services/programs the board wanted installed. Never seen so much misery in a network. Then they tried removing all filtering, and do some education. Net behaviour improved incredibly.
Also, I’m old enough to see the comparison to discussions about violence and sex on television; I have three kids, aged 17, 12 and 7 and still agree to David Byrne’s lines on one of the Talking Heads album covers:
“Violence on television only affects children whose parents behave like tv-personalities.”
Ok. This is what i have done. Configured ddclient the same standard way, gave the OpenDNS nameservers on my network in OpenSuse. I could make the parental controls to work only once and it has failed every time after that.
Upon a restart
ps aux | grep ddclient
gives the correct output. However, the OpenDNS IP address is not automatically updated. I think that’s the root cause of this problem. I even cleared my firefox cache and restarted my machine - no success.
I even tried ez-ipupdate out of frustration ; but later found that it does not support OpenDNS.
Any solution?
I want to stick to OpenDNS & ddclient.
I found a good Ubuntu forum link which is pretty much in sync with the ddclient README setting up ddclient for opendns on Ubuntu server - Ubuntu Forums
I told you what to do ddclient doesn’t do it that just associates the rules first you need to use the opendns servers.
ddclient doesn’t update the address what that does is if you go to the opendns web interface you’ll see your ext-ip as the one in the box.
dig is the command don’t care about ddclient, dig google should show you using the opendns servers.
You need to tell yast to use them …http://img527.imageshack.us/img527/3681/suselinux20091112182235.png
If you’ve done this then it is related to conf and you’re saying it isn’t actually updating in the webinterface then it looks like you need this in the conf file… /etc/ddclient.conf
OpenDNS > Support > Knowledge Base > Linux dynamic IP updater “DDClient”