Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I'm looking to run DansGuardian on my home network via a server machine I'm building. Before I build the server, I need to know whether or not I need two dedicated gigabit LAN ports or one on the machine.

I'm not sure how to run the server. Should it be part of the network or above the network between the router and the modem?

For example, before the router:

                             |-[COMPUTER_1]
[INTERNET]-[FILTER]-[ROUTER]-|-[COMPUTER_2]
                             |-[COMPUTER_X]

Or after the router:

                    |-[COMPUTER_1]
[INTERNET]-[ROUTER]-|-[COMPUTER_2]
                    |-[COMPUTER_X]
                    |-[FILTER]

In solution one above, I'd need two gigabit LAN ports, one connected to the internet and the other to the router. I'd also have to figure out how to run all traffic between the two ethernet interfaces.

In solution two above, I'd only need one gigabit LAN port, but I'd need to find a way to forward internet traffic through the filter from the router. The goal here is that the entire network is seamlessly filtered through DansGuardian.

I'll be running Ubuntu Server on the machine. I'm not sure how to set something like this up, so could someone recommend the steps I should take and the setup I should have? From time to time, I'd need to SSH into the filter machine, and I'm not sure if that's possible if the filter is behind the router.

share|improve this question

1 Answer 1

up vote 0 down vote accepted

The way Dansguardian works you don't have to have two NICs. In a standard installation DG acts as a proxy on your server on port 8080 and so if you set up all the Web clients to run via the proxy on yourserveraddress:8080 things will 'just work'.

Mind you, this configuration makes it easier for someone 'in the know' to bypass the proxy unless other filtering/blocking is put in place.

share|improve this answer
    
That's exactly the problem. I need ALL web content filtered with no intervention from a client's point of view. Often there will be phones and other devices using the network and I want them to be filtered, all without having to configure them individually. Can this be done? –  Naftuli Tzvi Kay Sep 28 '11 at 18:01

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.