Re: [pfSense] How to restrict certain websites for certain computers during certain times of the day?
But squid+squidguard is filter only http sites not https like facebook. or yourtube etc... On Fri, Jul 31, 2015 at 9:24 PM, Ivo Tonev wrote: > You can use squid+squidguard to create restrictions and time ranges. > > Need to create local users in pfsense box and use authentication > Em 31/07/2015 12:36, "Tim Koop" escreveu: > > > I have installed pfsense and I would like to block certain websites > during > > certain times of the day for certain computers. I've looked around > pfsense > > as well as a plugin or two, and this looks very difficult or impossible > to > > do. Anyone have any ideas? > > > > These are the details: > > > > It's installed in my home. My wife and I want full access to the > Internet > > all the time. Using the very nice firewall, I'm currently giving my kids > > access during certain times of the day. (They connect with DHCP and are > > given IP addresses in a certain range, whereas our computers are given > > static IP addresses based on mac address.) > > > > The main reason I'm blocking my kids' Internet is so they don't watch > > cartoons and play games all day long. But I wouldn't mind if they had > > access to, say, Wikipedia, or Ubuntu updates server. So want I want is > > this: > > > > - I want to enter a list of domain names to block, myself, not take it > > from someone else's list somewhere else. > > - I want this to only apply to certain computers (my kids), preferably by > > IP address range. > > - I want to be able to apply it only during certain times of the day. > > > > Does anything like this exist? Or how close can I get? > > > > Thanks. > > > > -- > > Tim K > > ___ > > pfSense mailing list > > https://lists.pfsense.org/mailman/listinfo/list > > Support the project with Gold! https://pfsense.org/gold > > > ___ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold > ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
Re: [pfSense] How to restrict certain websites for certain computers during certain times of the day?
Sent from Samsung Mobile Original message From: Brian Caouette Date: 01/08/2015 10:55 AM (GMT+12:00) To: pfSense Support and Discussion Mailing List Subject: Re: [pfSense] How to restrict certain websites for certain computers during certain times of the day? Squid lock is the way to go. This is what I use at home. We set the categories to block and no one can get to those sites. I've just recently played with scheduling so now we can enable or disable categories at will. I no we could open it up so mom and dad have full access to the net but honestly I have no interest in accessing anything we've blocked. Not to mention is keeps everyone safe. Get one infect computer in the house and we're all screwed. Been there done that! Not fun because you have to take everyone offline until all pcs are clean other wise you keep re infecting yourself. Sent from my iPad > On Jul 31, 2015, at 2:13 PM, Wue Bob > wrote: > > >> On 31/07/15 17:36, Tim Koop wrote: >> I have installed pfsense and I would like to block certain websites >> during certain times of the day for certain computers. I've looked >> around pfsense as well as a plugin or two, and this looks very >> difficult or impossible to do. Anyone have any ideas? > > For home use (considering spoofing etc. ...) it might be sufficient to > try a combination of firewall rule schedules [1] and firewall aliases to > be used in firewall rules. > > One alias might contain IP/FQDN of your computers. You'll use them as > source in the firewall rule/s allowing full access all the time. > Similarly, another alias would define your kids' computers. This alias > will again be the source in two firewall rules blocking some domains or > limiting times of the day. > > Then, in a third alias you would list all domains you want to block. > Obviously, this alias will be used as destination in another firewall > rule and the source in this rule will be your kids' alias. In yet > another firewall rule you would define a pass rule during certain times > of the day, applying a schedule in this rule (=> advanced features). As > source you'd again apply your kids' alias. (Since your kids connect with > DHCP and you don't, it should probably be ok to use a LAN range instead > of a kids' alias as source and placing this firewall rule after the full > access rule.) > > Carefully designing aliases, schedules and rules, and also considering > firewall rule processing order [2] should probably get you reasonably > close to what you want ... > > Regards, > Bob > > [1] https://doc.pfsense.org/index.php/Firewall_Rule_Schedules > [2] https://doc.pfsense.org/index.php/Firewall_Rule_Processing_Order > > > ___ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
Re: [pfSense] How to restrict certain websites for certain computers during certain times of the day?
Squid lock is the way to go. This is what I use at home. We set the categories to block and no one can get to those sites. I've just recently played with scheduling so now we can enable or disable categories at will. I no we could open it up so mom and dad have full access to the net but honestly I have no interest in accessing anything we've blocked. Not to mention is keeps everyone safe. Get one infect computer in the house and we're all screwed. Been there done that! Not fun because you have to take everyone offline until all pcs are clean other wise you keep re infecting yourself. Sent from my iPad > On Jul 31, 2015, at 2:13 PM, Wue Bob > wrote: > > >> On 31/07/15 17:36, Tim Koop wrote: >> I have installed pfsense and I would like to block certain websites >> during certain times of the day for certain computers. I've looked >> around pfsense as well as a plugin or two, and this looks very >> difficult or impossible to do. Anyone have any ideas? > > For home use (considering spoofing etc. ...) it might be sufficient to > try a combination of firewall rule schedules [1] and firewall aliases to > be used in firewall rules. > > One alias might contain IP/FQDN of your computers. You'll use them as > source in the firewall rule/s allowing full access all the time. > Similarly, another alias would define your kids' computers. This alias > will again be the source in two firewall rules blocking some domains or > limiting times of the day. > > Then, in a third alias you would list all domains you want to block. > Obviously, this alias will be used as destination in another firewall > rule and the source in this rule will be your kids' alias. In yet > another firewall rule you would define a pass rule during certain times > of the day, applying a schedule in this rule (=> advanced features). As > source you'd again apply your kids' alias. (Since your kids connect with > DHCP and you don't, it should probably be ok to use a LAN range instead > of a kids' alias as source and placing this firewall rule after the full > access rule.) > > Carefully designing aliases, schedules and rules, and also considering > firewall rule processing order [2] should probably get you reasonably > close to what you want ... > > Regards, > Bob > > [1] https://doc.pfsense.org/index.php/Firewall_Rule_Schedules > [2] https://doc.pfsense.org/index.php/Firewall_Rule_Processing_Order > > > ___ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
Re: [pfSense] How to restrict certain websites for certain computers during certain times of the day?
On 31/07/15 17:36, Tim Koop wrote: > I have installed pfsense and I would like to block certain websites > during certain times of the day for certain computers. I've looked > around pfsense as well as a plugin or two, and this looks very > difficult or impossible to do. Anyone have any ideas? For home use (considering spoofing etc. ...) it might be sufficient to try a combination of firewall rule schedules [1] and firewall aliases to be used in firewall rules. One alias might contain IP/FQDN of your computers. You'll use them as source in the firewall rule/s allowing full access all the time. Similarly, another alias would define your kids' computers. This alias will again be the source in two firewall rules blocking some domains or limiting times of the day. Then, in a third alias you would list all domains you want to block. Obviously, this alias will be used as destination in another firewall rule and the source in this rule will be your kids' alias. In yet another firewall rule you would define a pass rule during certain times of the day, applying a schedule in this rule (=> advanced features). As source you'd again apply your kids' alias. (Since your kids connect with DHCP and you don't, it should probably be ok to use a LAN range instead of a kids' alias as source and placing this firewall rule after the full access rule.) Carefully designing aliases, schedules and rules, and also considering firewall rule processing order [2] should probably get you reasonably close to what you want ... Regards, Bob [1] https://doc.pfsense.org/index.php/Firewall_Rule_Schedules [2] https://doc.pfsense.org/index.php/Firewall_Rule_Processing_Order ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
Re: [pfSense] How to restrict certain websites for certain computers during certain times of the day?
If this is browser-based access you are talking about, you might take a look at the various browser extensions out there like Waste No Time. They allow you to define certain times during which certain sites are accessible via the browser. Obviously, this isn't network-level blocking, but perhaps it will be sufficient. (But I wouldn't underestimate the ingenuity of rug rats.) Greg > On Jul 31, 2015, at 08:36 , Tim Koop wrote: > > I have installed pfsense and I would like to block certain websites during > certain times of the day for certain computers. I've looked around pfsense > as well as a plugin or two, and this looks very difficult or impossible to > do. Anyone have any ideas? > > These are the details: > > It's installed in my home. My wife and I want full access to the Internet > all the time. Using the very nice firewall, I'm currently giving my kids > access during certain times of the day. (They connect with DHCP and are > given IP addresses in a certain range, whereas our computers are given static > IP addresses based on mac address.) > > The main reason I'm blocking my kids' Internet is so they don't watch > cartoons and play games all day long. But I wouldn't mind if they had access > to, say, Wikipedia, or Ubuntu updates server. So want I want is this: > > - I want to enter a list of domain names to block, myself, not take it from > someone else's list somewhere else. > - I want this to only apply to certain computers (my kids), preferably by IP > address range. > - I want to be able to apply it only during certain times of the day. > > Does anything like this exist? Or how close can I get? > > Thanks. > > -- > Tim K > ___ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
Re: [pfSense] How to restrict certain websites for certain computers during certain times of the day?
You can use squid+squidguard to create restrictions and time ranges. Need to create local users in pfsense box and use authentication Em 31/07/2015 12:36, "Tim Koop" escreveu: > I have installed pfsense and I would like to block certain websites during > certain times of the day for certain computers. I've looked around pfsense > as well as a plugin or two, and this looks very difficult or impossible to > do. Anyone have any ideas? > > These are the details: > > It's installed in my home. My wife and I want full access to the Internet > all the time. Using the very nice firewall, I'm currently giving my kids > access during certain times of the day. (They connect with DHCP and are > given IP addresses in a certain range, whereas our computers are given > static IP addresses based on mac address.) > > The main reason I'm blocking my kids' Internet is so they don't watch > cartoons and play games all day long. But I wouldn't mind if they had > access to, say, Wikipedia, or Ubuntu updates server. So want I want is > this: > > - I want to enter a list of domain names to block, myself, not take it > from someone else's list somewhere else. > - I want this to only apply to certain computers (my kids), preferably by > IP address range. > - I want to be able to apply it only during certain times of the day. > > Does anything like this exist? Or how close can I get? > > Thanks. > > -- > Tim K > ___ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold > ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
[pfSense] How to restrict certain websites for certain computers during certain times of the day?
I have installed pfsense and I would like to block certain websites during certain times of the day for certain computers. I've looked around pfsense as well as a plugin or two, and this looks very difficult or impossible to do. Anyone have any ideas? These are the details: It's installed in my home. My wife and I want full access to the Internet all the time. Using the very nice firewall, I'm currently giving my kids access during certain times of the day. (They connect with DHCP and are given IP addresses in a certain range, whereas our computers are given static IP addresses based on mac address.) The main reason I'm blocking my kids' Internet is so they don't watch cartoons and play games all day long. But I wouldn't mind if they had access to, say, Wikipedia, or Ubuntu updates server. So want I want is this: - I want to enter a list of domain names to block, myself, not take it from someone else's list somewhere else. - I want this to only apply to certain computers (my kids), preferably by IP address range. - I want to be able to apply it only during certain times of the day. Does anything like this exist? Or how close can I get? Thanks. -- Tim K ___ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
