OpenDNS is probably the quickest solution to your problem however it does have drawbacks and is limited in its application and it costs money for the premium features. A better solution would be to install a filtering proxy (e.g. Dansguardian - www.dansguardian.org) and use firewall rules to force all outgoing web traffic through this. Not only will it provide the blocking you are after but it also has a plethora of other functions (e.g. reporting, NTLM/LDAP domain authentication, virus content scanning etc.). If you have a windows domain the NTLM/LDAP authentication may be of interest to you, it allows you to block different types of content for different users. It is a bit of work to learn if you haven't used it before but well worth the effort and the website and mailing lists are very helpful. We use it in our organisation with much success.
Cheers, Daniel From: Joseph Rotan [mailto:joseph.ro...@gmail.com] Sent: Monday, 24 May 2010 9:39 AM To: support@pfsense.com Subject: [pfSense Support] How to apply rule on pfsense 1.2.3 to block pornography sites Hi, I'm setting up a firewall for a high school but the school management requested that students should not able to access pornography sites, currently i have enabled any any rule on the WAN and LAN interface of my box. Is there anyone can help me out in on how to apply a rule that will block students from accessing pornography sites. Appreciate any help. Thanks, Joseph.
