{"id":1494,"date":"2011-01-30T16:25:00","date_gmt":"2011-01-30T21:25:00","guid":{"rendered":"http:\/\/ahmeddirie.com\/?p=1494"},"modified":"2012-11-25T14:24:27","modified_gmt":"2012-11-25T19:24:27","slug":"url-filtering-and-blocking-crap-with-vyatta","status":"publish","type":"post","link":"https:\/\/ahmeddirie.com\/blog\/networking\/url-filtering-and-blocking-crap-with-vyatta\/","title":{"rendered":"URL Filtering and Blocking Crap with Vyatta"},"content":{"rendered":"<p>This week, I had a client who was having issues with his router. With years of use, he began to experience a degradation in its performance. Although the office is small with 6 computers, his only requirements were a router that can block roughly 30 domains, and manage to perform well.<\/p>\n<p><!--more--><\/p>\n<p>I arrived at his office, and found he purchased a shiny new <a href=\"http:\/\/www.linksysbycisco.com\/EU\/en\/products\/WRT320N\">Cisco Linksys WRT320N<\/a> router for $100 from Futureshop. It looks sleek and sexy. I disconnected his <a href=\"http:\/\/www.dlink.ca\/products\/?pid=565\">D-Link DIR-615<\/a>, and proceeded to setup the new one. After getting through the setup, enabling the wireless, and specifying which systems would obtain which IP address, I found that the router can only block 4 domains.<\/p>\n<p>It&#8217;s situations like these where you realize there is a good solution for all of this, and it happens to start with <a href=\"http:\/\/www.vyatta.com\/\">Vyatta<\/a>. I brought over a computer with a second network card installed. Ran through the main setup of the router. Now, for domain or URL filtering, my understanding is that there is no limit with Vyatta.<\/p>\n<p>You run the commands below on the internal interface that connects the switch to the router.<\/p>\n<pre class=\"brush: plain; title: ; notranslate\" title=\"\">\r\nset service webproxy listen-address 10.10.0.1\r\nset service webproxy url-filtering squidguard local-block twitter.com\r\nset service webproxy url-filtering squidguard local-block facebook.com\r\nset service webproxy url-filtering squidguard local-block youtube.com\r\ncommit\r\n<\/pre>\n<p>There is also some extra cool features if you are looking for an added level of security. <a href=\"http:\/\/www.squidguard.org\/\">SquidGuard<\/a> allows you to use blacklists with <a href=\"http:\/\/www.squid-cache.org\/\">Squid<\/a>, and the great thing about it is that its totally free. One of those cool features is the ability of blocking adware and spyware, and not having to figure out what to block. You can use the commands below to use the lists managed by Squid.<\/p>\n<pre class=\"brush: plain; title: ; notranslate\" title=\"\">\r\nset service webproxy listen-address 10.10.0.1\r\nset service webproxy url-filtering squidguard block-category ads\r\nset service webproxy url-filtering squidguard block-category gambling\r\nset service webproxy url-filtering squidguard block-category malware\r\nset service webproxy url-filtering squidguard block-category phishing\r\nset service webproxy url-filtering squidguard block-category porn\r\nset service webproxy url-filtering squidguard block-category spyware\r\nset service webproxy url-filtering squidguard block-category warez\r\ncommit\r\n<\/pre>\n<p>And with a few lines of commands, you can protect your network better.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This week, I had a client who was having issues with his router. With years of use, he began to experience a degradation in its performance. Although the office is small with 6 computers, his only requirements were a router that can block roughly 30 domains, and manage to perform well.<\/p>\n","protected":false},"author":2,"featured_media":2941,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[85],"tags":[310,308,60,304,79,303,85,70,309,306,305,307,16],"_links":{"self":[{"href":"https:\/\/ahmeddirie.com\/blog\/wp-json\/wp\/v2\/posts\/1494"}],"collection":[{"href":"https:\/\/ahmeddirie.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ahmeddirie.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ahmeddirie.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/ahmeddirie.com\/blog\/wp-json\/wp\/v2\/comments?post=1494"}],"version-history":[{"count":9,"href":"https:\/\/ahmeddirie.com\/blog\/wp-json\/wp\/v2\/posts\/1494\/revisions"}],"predecessor-version":[{"id":2942,"href":"https:\/\/ahmeddirie.com\/blog\/wp-json\/wp\/v2\/posts\/1494\/revisions\/2942"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ahmeddirie.com\/blog\/wp-json\/wp\/v2\/media\/2941"}],"wp:attachment":[{"href":"https:\/\/ahmeddirie.com\/blog\/wp-json\/wp\/v2\/media?parent=1494"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ahmeddirie.com\/blog\/wp-json\/wp\/v2\/categories?post=1494"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ahmeddirie.com\/blog\/wp-json\/wp\/v2\/tags?post=1494"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}