Dansguardian Version 2.8.0.6 - Installation und Konfiguration

Für die Zugriffsverwaltung und inhaltliche Bewertung der angewählten Internetseiten bedienen wir uns dem Proxy Squid und dem Contentfilter Dansguardian.
Bei dieser Konstellation arbeiten Squid und Dansguardian als einer Vermittler, der auf der einen Seite Anfragen entgegennimmt, um dann über seine eigene Adresse eine Verbindung zu einem Zielhost herzustellen. So bleibt einerseits die eigentliche Adresse des Client-Rechners dem Zielhost gegenüber komplett verborgen, was eine gewisse Anonymität schafft. Ferner können die Ergebnisse der Clientanfragen zwischengespeichert werden, um so Bandbreite zu sparen, da diese gepufferten Objekte nicht nochmals geladen werden müssen. Darüber hinaus haben wir so die Möglichkeit:

• unerwünschte Seiten zu blocken (Pornographie)
• bestimmte Inhalte nur bestimmten Usern zur Verfügung zu stellen (Multimediainhalte des WWW)
• Seiten auf unerwünschten Inhalt zu überprüfen und ggf. zu blocken (Glücksspiel und politische Propaganda) oder
• eine Virenprüfung der übermittelten Daten vorzunehmen.

Wie sollte es auch hier anders sein, die Installation der benötigten Programme erfolgt im gewohnten Rahmen via yum, welches wir als User root ausführen.

 # su -

 # yum install dansguardian

Was uns das Paket dansguardian alles mitbringt offenbart eine detailierte Blick¹⁾, nach erfolgter Installation des Paketes, in das RPM.

# rpm -iql dansguardian
Name        : dansguardian                 Relocations: (not relocatable)
Version     : 2.8.0.6                           Vendor: Dag Apt Repository, http://dag.wieers.com/apt/
Release     : 1.2.el5.rf                    Build Date: Mi 07 Mär 2007 19:59:59 CET
Install Date: Sa 08 Nov 2008 13:55:11 CET      Build Host: lisse.leuven.wieers.com
Group       : System Environment/Daemons    Source RPM: dansguardian-2.8.0.6-1.2.el5.rf.src.rpm
Size        : 736787                           License: GPL
Signature   : DSA/SHA1, Fr 09 Mär 2007 10:32:24 CET, Key ID a20e52146b8d79e6
Packager    : Dag Wieers <dag@wieers.com>
URL         : http://www.dansguardian.org/
Summary     : Content filtering web proxy
Description :
DansGuardian is a web filtering engine that checks the content within
the page itself in addition to the more traditional URL filtering.

DansGuardian is a content filtering proxy. It filters using multiple methods,
including URL and domain filtering, content phrase filtering, PICS filtering,
MIME filtering, file extension filtering, POST filtering.
/etc/dansguardian
/etc/dansguardian/bannedextensionlist
/etc/dansguardian/bannediplist
/etc/dansguardian/bannedmimetypelist
/etc/dansguardian/bannedphraselist
/etc/dansguardian/bannedregexpurllist
/etc/dansguardian/bannedsitelist
/etc/dansguardian/bannedurllist
/etc/dansguardian/banneduserlist
/etc/dansguardian/contentregexplist
/etc/dansguardian/dansguardian.conf
/etc/dansguardian/dansguardianf1.conf
/etc/dansguardian/exceptioniplist
/etc/dansguardian/exceptionphraselist
/etc/dansguardian/exceptionsitelist
/etc/dansguardian/exceptionurllist
/etc/dansguardian/exceptionuserlist
/etc/dansguardian/filtergroupslist
/etc/dansguardian/greysitelist
/etc/dansguardian/greyurllist
/etc/dansguardian/languages
/etc/dansguardian/languages/ReadMe
/etc/dansguardian/languages/arspanish
/etc/dansguardian/languages/arspanish/messages
/etc/dansguardian/languages/arspanish/template.html
/etc/dansguardian/languages/bulgarian
/etc/dansguardian/languages/bulgarian/messages
/etc/dansguardian/languages/bulgarian/template.html
/etc/dansguardian/languages/chinesebig5
/etc/dansguardian/languages/chinesebig5/messages
/etc/dansguardian/languages/chinesebig5/template.html
/etc/dansguardian/languages/chinesegb2312
/etc/dansguardian/languages/chinesegb2312/messages
/etc/dansguardian/languages/chinesegb2312/template.html
/etc/dansguardian/languages/czech
/etc/dansguardian/languages/czech/messages
/etc/dansguardian/languages/czech/template.html
/etc/dansguardian/languages/danish
/etc/dansguardian/languages/danish/messages
/etc/dansguardian/languages/danish/template.html
/etc/dansguardian/languages/dutch
/etc/dansguardian/languages/dutch/messages
/etc/dansguardian/languages/dutch/template.html
/etc/dansguardian/languages/french
/etc/dansguardian/languages/french/messages
/etc/dansguardian/languages/french/template.html
/etc/dansguardian/languages/german
/etc/dansguardian/languages/german/messages
/etc/dansguardian/languages/german/template.html
/etc/dansguardian/languages/hebrew
/etc/dansguardian/languages/hebrew/messages
/etc/dansguardian/languages/hebrew/template.html
/etc/dansguardian/languages/indonesian
/etc/dansguardian/languages/indonesian/messages
/etc/dansguardian/languages/indonesian/template.html
/etc/dansguardian/languages/italian
/etc/dansguardian/languages/italian/messages
/etc/dansguardian/languages/italian/template.html
/etc/dansguardian/languages/lithuanian
/etc/dansguardian/languages/lithuanian/messages
/etc/dansguardian/languages/lithuanian/template.html
/etc/dansguardian/languages/mxspanish
/etc/dansguardian/languages/mxspanish/messages
/etc/dansguardian/languages/mxspanish/template.html
/etc/dansguardian/languages/polish
/etc/dansguardian/languages/polish/messages
/etc/dansguardian/languages/polish/template.html
/etc/dansguardian/languages/portuguese
/etc/dansguardian/languages/portuguese/messages
/etc/dansguardian/languages/portuguese/messagesaccents
/etc/dansguardian/languages/portuguese/template.html
/etc/dansguardian/languages/russian-1251
/etc/dansguardian/languages/russian-1251/messages
/etc/dansguardian/languages/russian-1251/template.html
/etc/dansguardian/languages/slovak
/etc/dansguardian/languages/slovak/messages
/etc/dansguardian/languages/slovak/template.html
/etc/dansguardian/languages/spanish
/etc/dansguardian/languages/spanish/messages
/etc/dansguardian/languages/spanish/template.html
/etc/dansguardian/languages/swedish
/etc/dansguardian/languages/swedish/messages
/etc/dansguardian/languages/swedish/template.html
/etc/dansguardian/languages/turkish
/etc/dansguardian/languages/turkish/messages
/etc/dansguardian/languages/turkish/template.html
/etc/dansguardian/languages/ukenglish
/etc/dansguardian/languages/ukenglish/messages
/etc/dansguardian/languages/ukenglish/template.html
/etc/dansguardian/logrotation
/etc/dansguardian/phraselists
/etc/dansguardian/phraselists/badwords
/etc/dansguardian/phraselists/badwords/weighted_dutch
/etc/dansguardian/phraselists/badwords/weighted_french
/etc/dansguardian/phraselists/badwords/weighted_german
/etc/dansguardian/phraselists/badwords/weighted_portuguese
/etc/dansguardian/phraselists/badwords/weighted_spanish
/etc/dansguardian/phraselists/chat
/etc/dansguardian/phraselists/chat/weighted
/etc/dansguardian/phraselists/chat/weighted_italian
/etc/dansguardian/phraselists/drugadvocacy
/etc/dansguardian/phraselists/drugadvocacy/weighted
/etc/dansguardian/phraselists/gambling
/etc/dansguardian/phraselists/gambling/banned
/etc/dansguardian/phraselists/gambling/banned_portuguese
/etc/dansguardian/phraselists/gambling/weighted
/etc/dansguardian/phraselists/gambling/weighted_portuguese
/etc/dansguardian/phraselists/games
/etc/dansguardian/phraselists/games/weighted
/etc/dansguardian/phraselists/goodphrases
/etc/dansguardian/phraselists/goodphrases/exception
/etc/dansguardian/phraselists/goodphrases/exception_email
/etc/dansguardian/phraselists/goodphrases/weighted_general
/etc/dansguardian/phraselists/goodphrases/weighted_general_danish
/etc/dansguardian/phraselists/goodphrases/weighted_general_portuguese
/etc/dansguardian/phraselists/goodphrases/weighted_news
/etc/dansguardian/phraselists/googlesearches
/etc/dansguardian/phraselists/googlesearches/banned
/etc/dansguardian/phraselists/gore
/etc/dansguardian/phraselists/gore/weighted
/etc/dansguardian/phraselists/gore/weighted_portuguese
/etc/dansguardian/phraselists/illegaldrugs
/etc/dansguardian/phraselists/illegaldrugs/banned
/etc/dansguardian/phraselists/illegaldrugs/banned_portuguese
/etc/dansguardian/phraselists/illegaldrugs/weighted
/etc/dansguardian/phraselists/illegaldrugs/weighted_portuguese
/etc/dansguardian/phraselists/intolerance
/etc/dansguardian/phraselists/intolerance/banned_portuguese
/etc/dansguardian/phraselists/intolerance/weighted
/etc/dansguardian/phraselists/intolerance/weighted_portuguese
/etc/dansguardian/phraselists/legaldrugs
/etc/dansguardian/phraselists/legaldrugs/weighted
/etc/dansguardian/phraselists/malware
/etc/dansguardian/phraselists/malware/weighted
/etc/dansguardian/phraselists/news
/etc/dansguardian/phraselists/news/weighted
/etc/dansguardian/phraselists/nudism
/etc/dansguardian/phraselists/nudism/weighted
/etc/dansguardian/phraselists/peer2peer
/etc/dansguardian/phraselists/peer2peer/weighted
/etc/dansguardian/phraselists/personals
/etc/dansguardian/phraselists/personals/weighted
/etc/dansguardian/phraselists/personals/weighted_portuguese
/etc/dansguardian/phraselists/pornography
/etc/dansguardian/phraselists/pornography/banned
/etc/dansguardian/phraselists/pornography/banned_portuguese
/etc/dansguardian/phraselists/pornography/weighted
/etc/dansguardian/phraselists/pornography/weighted_danish
/etc/dansguardian/phraselists/pornography/weighted_dutch
/etc/dansguardian/phraselists/pornography/weighted_french
/etc/dansguardian/phraselists/pornography/weighted_german
/etc/dansguardian/phraselists/pornography/weighted_italian
/etc/dansguardian/phraselists/pornography/weighted_portuguese
/etc/dansguardian/phraselists/pornography/weighted_spanish
/etc/dansguardian/phraselists/proxies
/etc/dansguardian/phraselists/proxies/weighted
/etc/dansguardian/phraselists/sport
/etc/dansguardian/phraselists/sport/weighted
/etc/dansguardian/phraselists/violence
/etc/dansguardian/phraselists/violence/weighted
/etc/dansguardian/phraselists/violence/weighted_portuguese
/etc/dansguardian/phraselists/warezhacking
/etc/dansguardian/phraselists/warezhacking/weighted
/etc/dansguardian/phraselists/weapons
/etc/dansguardian/phraselists/weapons/weighted
/etc/dansguardian/phraselists/weapons/weighted_portuguese
/etc/dansguardian/phraselists/webmail
/etc/dansguardian/phraselists/webmail/weighted
/etc/dansguardian/pics
/etc/dansguardian/transparent1x1.gif
/etc/dansguardian/weightedphraselist
/etc/httpd/conf.d/dansguardian.conf
/etc/logrotate.d/dansguardian
/etc/rc.d/init.d/dansguardian
/usr/sbin/dansguardian
/usr/share/doc/dansguardian-2.8.0.6
/usr/share/doc/dansguardian-2.8.0.6/INSTALL
/usr/share/doc/dansguardian-2.8.0.6/LICENSE
/usr/share/doc/dansguardian-2.8.0.6/README
/usr/share/man/man8/dansguardian.8.gz
/var/log/dansguardian
/var/www/dansguardian
/var/www/dansguardian/dansguardian.pl

Mit dem Editor unserer Wahl z.B. vim bearbeiten wir nun die Konfigurationsdatei des Contentfilters:

 # vim /etc/dansguardian/dansguardian.conf

Das erste und wichtigste, was wir hier groß einstellen, sind die Adress- und Portangaben:

# the port that DansGuardian listens to.
filterport = 8080

# the ip of the proxy (default is the loopback - i.e. this server)
proxyip = 127.0.0.1

# the port DansGuardian connects to proxy on
proxyport = 3128

Ferner passen wir noch die Internationalisierung in der Konfigurationsdatei an:

# the port that DansGuardian listens to.
language = 'german'

In Summe ergibt sich also folgende Gesamtkonfiguration:

egrep -v '(^.*#|^$)' /etc/dansguardian/dansguardian.conf
reportinglevel = 3
languagedir = '/etc/dansguardian/languages'
language = 'german'
loglevel = 3
logexceptionhits = on
logfileformat = 1
filterip =
filterport = 8080
proxyip = 127.0.0.1
proxyport = 3128
accessdeniedaddress = 'http://YOURSERVER.YOURDOMAIN/cgi-bin/dansguardian.pl'
nonstandarddelimiter = on
usecustombannedimage = 1
custombannedimagefile = '/etc/dansguardian/transparent1x1.gif'
filtergroups = 1
filtergroupslist = '/etc/dansguardian/filtergroupslist'
bannediplist = '/etc/dansguardian/bannediplist'
exceptioniplist = '/etc/dansguardian/exceptioniplist'
banneduserlist = '/etc/dansguardian/banneduserlist'
exceptionuserlist = '/etc/dansguardian/exceptionuserlist'
showweightedfound = on
weightedphrasemode = 2
urlcachenumber = 1000
urlcacheage = 900
phrasefiltermode = 2
preservecase = 0
hexdecodecontent = 0
forcequicksearch = 0
reverseaddresslookups = off
reverseclientiplookups = off
createlistcachefiles = on
maxuploadsize = -1
maxcontentfiltersize = 256
usernameidmethodproxyauth = on
usernameidmethodident = off
preemptivebanning = on
forwardedfor = off
usexforwardedfor = off
logconnectionhandlingerrors = on
maxchildren = 120
minchildren = 8
minsparechildren = 4
preforkchildren = 6
maxsparechildren = 32
maxagechildren = 500
ipcfilename = '/tmp/.dguardianipc'
urlipcfilename = '/tmp/.dguardianurlipc'
nodaemon = off
nologger = off
softrestart = off

Nach der erfolgten Inbetriebnahme drehen wir dem Dansguardian etwas die Luft ab, was heissen will, wir lassen uns nur noch die geblockten Seiten reporten, da das Logfile ggf. etwas arg überschwemmt wird mit Informationen, die uns eh' nicht interessieren.

# vim /etc/dansguardian/dansguardian.conf

# Logging Settings
#
# 0 = none  1 = just denied  2 = all text based  3 = all requests
loglevel = 1

In der zweiten Konfig-Datei /etc/dansguardian/dansguardianf1.conf stellen wir dann noch ein, wie scharf der Kontentfilter arbeiten soll:

 # vim /etc/dansguardian/dansguardianf1.conf

Mit einem Naughtyness limit von 100 liegt man schon mal in einem praktikablen Bereich.

# Naughtyness limit
# This the limit over which the page will be blocked.  Each weighted phrase is given
# a value either positive or negative and the values added up.  Phrases to do with
# good subjects will have negative values, and bad subjects will have positive
# values.  See the weightedphraselist file for examples.
# As a guide:
# 50 is for young children,  100 for old children,  160 for young adults.
naughtynesslimit = 100

Somit ergibt sich hier folgende Gesamtkonfiguration:

egrep -v '(^.*#|^$)' /etc/dansguardian/dansguardianf1.conf
bannedphraselist = '/etc/dansguardian/bannedphraselist'
weightedphraselist = '/etc/dansguardian/weightedphraselist'
exceptionphraselist = '/etc/dansguardian/exceptionphraselist'
bannedsitelist = '/etc/dansguardian/bannedsitelist'
greysitelist = '/etc/dansguardian/greysitelist'
exceptionsitelist = '/etc/dansguardian/exceptionsitelist'
bannedurllist = '/etc/dansguardian/bannedurllist'
greyurllist = '/etc/dansguardian/greyurllist'
exceptionurllist = '/etc/dansguardian/exceptionurllist'
bannedregexpurllist = '/etc/dansguardian/bannedregexpurllist'
bannedextensionlist = '/etc/dansguardian/bannedextensionlist'
bannedmimetypelist = '/etc/dansguardian/bannedmimetypelist'
picsfile = '/etc/dansguardian/pics'
contentregexplist = '/etc/dansguardian/contentregexplist'
naughtynesslimit = 100
bypass = 0
bypasskey = ''

Nun starten wir das erste mal unsere neuen Dienst dansguardian:

 # service dansguardian start
 Web Content Filter (dansguardian) starten:                 [  OK  ]

Damit der Dansguardian-daemon automatisch bei jedem Systemstart startet, kann die Einrichtung des Start-Scriptes über folgenden Befehl erreicht werden:

 # chkconfig dansguardian on

Die Überprüfungung ob der Dienst (Daemons) Dansguardian wirklich bei jedem Systemstart automatisch mit gestartet wird, kann durch folgenden Befehle erreicht werden:

 # chkconfig --list | grep dansguardian
 dansguardian    0:Aus   1:Aus   2:Ein   3:Ein   4:Ein   5:Ein   6:Aus

Wichtig sind jeweils die Schalter on bzw. Ein bei den Runleveln - 2 3 4 5.

Von Haus aus, ist der „ausgelieferte“ Dansguardian doch recht aggressiv eingestellt; d.h. viele doch erwünschten Seiten werden geblockt. Zum Erlauben dieser Seiten gibt es mehrere Möglichkeiten.

Ganze Seiten können von der inhaltlichen Bewertung ausgenommen werden, wenn in der /etc/dansguardian/exceptionsitelist ein entsprechender Eintrag vorhanden ist, so z.B.:

# vim /etc/dansguardian/exceptionsitelist

#Sites in exception list
#Don't bother with the www. or
#the http://
#
#These are specifically domains and are not URLs.
#For example 'foo.bar/porn/' is no good, you need
#to just have 'foo.bar'.
#
#You can also match IPs here too.
#
#As of DansGuardian 2.7.3 you can now include
#.tld so for example you can match .gov for example


dansguardian.org

nausch.org
urlblacklist.com
ebay.de
bay.com

Will man einzelne Workstations ausnehmen, so trägt man diese in die /etc/dansguardian/exceptioniplist ein:

# vim /etc/dansguardian/exceptioniplist

#IP addresses of computers to not filter
#and just pass requests straight through to
#
#These would be servers which
#need unfiltered access for
#updates.  Also administrator
#workstations which need to
#download programs and check
#out blocked sites should be
#put here.
#
#Only put IP addresses here,
#not host names
#
#This is not the IP of web servers
#you don't want to filter.

#192.168.0.1
#192.168.0.2
#192.168.42.2

#BOfH's Workstation
192.168.20.10

Über die /etc/dansguardian/bannedextensionlist stellen wir dann bei Bedarf noch ein, welche Datei-Extensions wird erlauben und welche wir (aus)sperren wollen:

# vim /etc/dansguardian/bannedextensionlist

#Banned extension list

# File extensions with executable code 

# The following file extensions can contain executable code.
# This means they can potentially carry a virus to infect your computer.

.ade  # Microsoft Access project extension
.adp  # Microsoft Access project
.asx  # Windows Media Audio / Video
.bas  # Microsoft Visual Basic class module
.bat  # Batch file
.cab  # Windows setup file
.chm  # Compiled HTML Help file
.cmd  # Microsoft Windows NT Command script
.com  # Microsoft MS-DOS program
.cpl  # Control Panel extension
.crt  # Security certificate 
.dll  # Windows system file
.exe  # Program
.hlp  # Help file
.ini  # Windows system file
.hta  # HTML program
.inf  # Setup Information
.ins  # Internet Naming Service
.isp  # Internet Communication settings
# .js   # JScript file - often needed in web pages
# .jse  # Jscript Encoded Script file - often needed in web pages
.lnk  # Windows Shortcut
.mda  # Microsoft Access add-in program 
.mdb  # Microsoft Access program
.mde  # Microsoft Access MDE database
.mdt  # Microsoft Access workgroup information 
.mdw  # Microsoft Access workgroup information 
.mdz  # Microsoft Access wizard program 
.msc  # Microsoft Common Console document
.msi  # Microsoft Windows Installer package
.msp  # Microsoft Windows Installer patch
.mst  # Microsoft Visual Test source files
.pcd  # Photo CD image, Microsoft Visual compiled script
.pif  # Shortcut to MS-DOS program
.prf  # Microsoft Outlook profile settings
.reg  # Windows registry entries
.scf  # Windows Explorer command
.scr  # Screen saver
.sct  # Windows Script Component
.sh   # Shell script
.shs  # Shell Scrap object
.shb  # Shell Scrap object
.sys  # Windows system file
.url  # Internet shortcut
.vb   # VBScript file
.vbe  # VBScript Encoded script file
.vbs  # VBScript file
.vxd  # Windows system file
.wsc  # Windows Script Component
.wsf  # Windows Script file
.wsh  # Windows Script Host Settings file
.otf  # Font file - can be used to instant reboot 2k and xp
.ops  # Office XP settings 



# Files which one normally things as non-executable but
# can contain harmful macros and viruses

.doc  # Word document
.xls  # Excel document
.pps  # PowerPoint selfrunning

# Other files which may contain files with executable code

#.gz   # Gziped file
#.tar  # Tape ARchive file
.zip  # Windows compressed file
#.tgz  # Unix compressed file
#.bz2  # Unix compressed file
.cdr  # Mac disk image
.dmg  # Mac disk image
.smi  # Mac self mounting disk image
.sit  # Mac compressed file
.sea  # Mac compressed file, self extracting
.bin  # Mac binary compressed file
.hqx  # Mac binhex encoded file
.rar  # Similar to zip


# Time/bandwidth wasting files

.mp3  # Music file
.mpeg # Movie file
.mpg  # Movie file
.avi  # Movie file
.asf  # this can also exploit a security hole allowing virus infection
.iso  # CD ISO image
.ogg  # Music file
.wmf  # Movie file
.bin # CD ISO image
.cue # CD ISO image

# meine eigenen 
.ani  # animated cursor

Über die /etc/dansguardian/bannedregexpurllist haben wir die möglichkeit, einzelne Seiten an Hand ihrer URL zu sperren. Hierzu Nutzen wir geeignete REGEX um die URLs zu definieren, welche wir (aus)sperren wollen:

# vim /etc/dansguardian/bannedregexpurllist

#Banned URLs based on Regular Expressions
#
# E.g. 'sex' would block sex.com and middlesex.com etc

# The following two lines may work better than the above - Philip Pearce 9/11/2004
(^|[-\?+=&/_])(big|cyber|hard|huge|mega|small|soft|super|tiny|bare|naked|nude|anal|oral|topp?les|sex){1,}.*(anal|babe|bharath|boob|breast|busen|busty|clit|cum|cunt|dick|fetish|fuck|girl|hooter|lez|lust|naked|nude|oral|orgy|penis|porn|porno|pupper|pussy|rotten|sex|shit|smutpump|teen|topp?les|xxx)s?([-\?+=&/_]|$)
(^|[-\?+=&/_])(anal|babe|bharath|boob|breast|busen|busty|clit|cum|cunt|dick|fetish|fuck|girl|hooter|lez|lust|naked|nude|oral|orgy|penis|porn|porno|pupper|pussy|rotten|sex|shit|smutpump|teen|topp?les|xxx){1,}.*(big|cyber|hard|huge|mega|small|soft|super|tiny|bare|naked|nude|anal|oral|topp?les|sex){1,}([-\?+=&/_]|$)

# Onlinegaming
(gladiatus|4story|gameforge|ikariam|pog.com|cracymonkeygames|poissonrouge)

# Musikmaffia
(musicload|musikload)

# videoportale
(vo.llnwd)

# Werbemüll
(Standardteaser|sponsorads|google-analytics)

# Schnackslanbahnungsportale
(facebook)

Oft ist es wünschenswert einzelen User(gruppen) bei der Bewertung der Verbindungswünsche in's WWW unterschiedlich zu behandeln. So könnten zum Beispiel Schüler und Lehrer, DAUs, Null- Halb- und Stellenleiter wie auch VIPs mit eigenen Filterregelsätzen belegt werden.
Was zunächst kompliziert anmutet, funktioniert recht einfach und auch überschaubar.

Als erstes geben wir unserem Kontentfilter mit, wieviele Filtergruppen (max. 99) wir verwenden möchten.

# vim dansguardian.conf

# Filter groups options
# filtergroups sets the number of filter groups. A filter group is a set of content
# filtering options you can apply to a group of users.  The value must be 1 or more.
# DansGuardian will automatically look for dansguardianfN.conf where N is the filter
# group.  To assign users to groups use the filtergroupslist option.  All users default
# to filter group 1.  You must have some sort of authentication to be able to map users
# to a group.  The more filter groups the more copies of the lists will be in RAM so
# use as few as possible.
filtergroups = 2 
filtergroupslist = '/etc/dansguardian/filtergroupslist'

In der Datei filtergroupslist geben wir nun all diejenigen Nutzer an, die nicht in der Standardgruppe bewertet werden sollen, sondern in einer der zuvor definierten Filtergruppen.

# vim filtergroupslist

# Filter Groups List file for DansGuardian
#
# Format is <user>=filter<1-99> where 1-99 are the groups
#
jakob=filter2

Die eigentliche Änderungen zur Standardkonfiguration nehmen wir nun, in der dansguardianfn.conf vor. Neben einen ggf. abweichenden Naughtyness limit definieren wir hier etwaige abweichende Sperr- und Ausnahme-Listen.

# vim dansguardianf2.conf

# Content filtering files location
bannedphraselist = '/etc/dansguardian/bannedphraselist'
weightedphraselist = '/etc/dansguardian/weightedphraselist'
exceptionphraselist = '/etc/dansguardian/exceptionphraselist'
bannedsitelist = '/etc/dansguardian/bannedsitelist_f2'
greysitelist = '/etc/dansguardian/greysitelist'
exceptionsitelist = '/etc/dansguardian/exceptionsitelist_f2'
bannedurllist = '/etc/dansguardian/bannedurllist'
greyurllist = '/etc/dansguardian/greyurllist'
exceptionurllist = '/etc/dansguardian/exceptionurllist'
bannedregexpurllist = '/etc/dansguardian/bannedregexpurllist_f2'
bannedextensionlist = '/etc/dansguardian/bannedextensionlist'
bannedmimetypelist = '/etc/dansguardian/bannedmimetypelist'
picsfile = '/etc/dansguardian/pics'
contentregexplist = '/etc/dansguardian/contentregexplist'

In den jeweiligen Listen erweitern wir nun die entsprechenden gesperrten Seiten oder definieren entsprechende Ausnahmeregelungen.