Or what to do with a home networking setup and the kids...
we use "squid" as proxy with stopword list's. Our list is about 350 line long.
One approach. The bad news is, they all don't work. It is impossible to automatically do a linguistic analysis and decide which sites are junk. People can get very irate when good discussions about sexuality are blocked! This is just one example. You will find more than your software will ever be able to handle.
Filtering by URL doesn't work either. For detecting URLs to blacklist see above. There is commercial software about, but it all sucks. See the example of cyberpatrol: it was proven(!) that they generate their blacklists automatically, badly, and black out a large amount of valid sites as well as missing junk ones. Waste of money.
Btw filtering by URL is easily circumvented: use a URL-anomymiser/redirector. There goes that idea.
Problem: how to keep that list updated?
Precisely. Forget it.
reffering to that, a teacher I know keeps a very pragmatical and practical method of doing this: With the help of his pupils. Checking squid's logfiles, new sites are frequently added to the black list.
*laugh* do the pupils know about their help? :-)
Any other ideas around?
None which are practical, except for this, but that isn't going to be easy:
But never forget to solve the problem of pornsite surfing in school at the roots. An the roots are the pupils, and not the net.
Can't fix a social problem with blacklists...
My EUR0.02
Volker
Filtering software is fallible, most people know this.
BUT.
Let's say you are a corporate/school/whatever administrator. You do not filter inet access at all. Someone is viewing porn and it offends themselves, or someone else (their parents/boss/co-workers/whatever). You then get sued for whatever reason (creating a hostile work environment, kiddie porn possesion, whatever). If you have filtering software installed you have a much stronger legal stance, you made a reasonable effort to prevent it.
People have succesfully sued companies for 1+ million for things such as sending around "10 reasons why beer is better then women" joke emails, viewing/emailing porn around, etc. Since companies have a fiduciary responsibility to the board/shareholders to take measures to minimize financial risk this is often why the filter internet access.
Kurt Seifried, seifried@securityportal.com Securityportal - your focal point for security on the 'net