[Ldsoss] Internet Filter

[Gary Thornock]

--- Jay Askren <jay.askren at gmail.com> wrote:
> If there is a way to use Dan's Guardian to filter the computer
> it's on so it's not easy to get around the filter, I'd be
> interested in hearing how to do that.

The first thought that came to mind was to use transparent
proxy-style firewall rules, but then I wondered, given that the
browser and the proxy would be running on the same machine,
whether iptables could distinguish between an outbound request
from the proxy and an outbound request (on the same port) from a
browser.  I'm fairly sure I could get pf to do it, but I'm less
familiar with iptables.

The other option is to configure the browser such that it always
uses the proxy and the user can't disable it (probably using a
lockPref statement in /usr/lib/firefox/firefox.cfg).