Filtering websites for different users

clearosYou might need to apply different filtering for different groups of users, for example blocking youtube.com for all students, but allowing it for teachers. This article describes one approach.


Browser internet options

For these settings to work your browsers need to have the following proxy setting.

Chrome

  1. Start Chrome.
  2. Click the three dots (top-right) and choose Settings.
  3. Scroll to the bottom, and expand the Advanced section.
  4. Scroll to the bottom again, and in the System section click Open proxy settings.
  5. In the Internet Properties dialog box, click LAN settings.
    1. Select Use a proxy server for your LAN..., and leave all other checkboxes unticked.
    2. Address: 192.168.1.1
    3. Port: 8080
    4. Click OK.
  6. Click OK again to close the dialog box.

Note that this will configure the System Settings which are also used by Internet Explorer and potentially Firefox (see below).

Firefox

  1. Start Firefox.
  2. Click the three bars (top-right) and choose Options.
  3. Scroll to the bottom, and in the Network Settings section click the Settings... button.
  4. You can select the Use system proxy settings radio button, if you've followed the settings above for Chrome.
  5. Otherwise select the Manual proxy configuration radio button.
    1. HTTP Proxy: 192.168.1.1
    2. Port: 8080
    3. Select Use this proxy server for all protocols.
    4. You might also select Do not prompt for authentication if password is saved.
    5. Click OK.

Note that you might decide to automatically configure proxy settings for your users. Whilst this is more complicated to set up it is easier for your users.

Web proxy server

Start by logging on to your ClearOS web interface.

  1. Go to Gateway > Web Proxy Server.
  2. In the Authentication section click the Edit button.
  3. For Mode, select Non-Transparent + User Authentication + NTLM.
  4. Click Update.

Note that the User Authentication option will ask for authentication when you start up a browser. If your workstation is not joined to the domain, you will need to enter a username and password for the domain (e.g. yourdomain\steven). using NTLM will allow your authentication to happen automatically when using workstations that are joined to the ClearOS domain.

 

Create Groups

You will need to create user groups and make users members of the different groups. Some example groups might be:

  • students
  • teachers
  • itsupport
  • nointernet

The nointernet group might allow you to put a user in the group and then prevent them from using the internet with a policy that blocks all content.

 

Add Content Filter Engine policies

Now you can create policies that apply to these groups.

  1. Go to Gateway > Content Filter Engine.
  2. In the App Policies section, click the Add button.
    1. Enter a Policy name (e.g. students).
    2. Select the applicable Group (e.g. students).
    3. Click Add.

Repeat for all the policies you need, you can add upto 10 policies. Now you are ready to configure the Content Filter Engine policies to suit your needs.

 

Thanks for visiting.