Proxy / P0rn Detection.

[Analog-X64]

I've been running untangle for about a week now, and taking baby steps. So for now I only have the web[pg] filter running, and I'm not even blocking simply flagging.

Before I actually start blocking anything, I want to make sure I dont get too many false blocks.

So here are some examples.

These sites have been flagged as pornography
http://www.network54.com/Forum/333879
http://www.bollywoodworld.com/bwpic.jpg

These sites have been flagged as Proxy
http://www.google.com/gwt/n?u=http:/...letwist-player
http://www.wlmessenger.net/api/2.5/loader.js

The above is a small sample but should give you an idea.

Any recommendations on improving this?

In the future, I may be able to convince the boss to purchase the Business Edition of untangle once they see the benefits, but I'd like to get a proper setup working first.

[WebFooL]

Hi,
If you want to add/remove sites from the web filter use the SubmitURL tool. (Link http://forums.untangle.com/listedit/home.rb)

[otis]

Since the filter lists are fed to you, we are somewhat stuck there.
All you can do is make your end users aware that some things may be unintentionally blocked and to forward the block page in a request for white listing.

It has been a bit of a pain for me but not so overbearing that I would undo putting UT in.
I am pretty sure you would feel the same pain from other like WebSense etc.

[dbunyard]

You may want to give the eSoft filter a try since you can demo it for 14 days. It does a MUCH better job IMHO.

[Analog-X64]

So I have no control over what I want to white list?

[associatedmutual]

Today gstatic.com, the domain google serves static controls and graphics from, was labeled as pornography. This meant google maps would load but not function for my users. The categorization is bad enough that it's practically useless. I'm down to the point where I only block the porn category and log anything else that concerns me. I manually block pages that become a problem.

This sort of thing is a problem for any community-based categorization system that doesn't have a robust review process. I was using openDNS in the past to block sites and found the vast majority of sites were miscategorized there as well.

[dbunyard]

So I have no control over what I want to white list?

Under the "Pass Lists" tab in the Web Filter settings there is a "Manage List" button where you can allow any domains that you want.

[associatedmutual]

So I have no control over what I want to white list?

You can always add sites to your pass list and they will be allowed no matter how the categories get screwed up. I suggest doing this for your business-critical sites at least.