Friday, November 07, 2008

Why Manual Whitelisting works for Kids

As I've blogged previously a few times, I use squid with a simple white list

acl goodsites dstdomain "/etc/squid/goodsites"
http_access allow goodsites our_networks

for blocking access to my kids subnet. I have a very small list of sites, mostly .gov, because after all the government would never post anything inappropriate right?

(I initially allowed the entire TLD but my son started looking up crime statistics on the FBI web site, so made it more restrictive.)

My son has spent hours on the NASA sight downloading pictures, adding them to his GNOME backgrounds (yes his desktop is Ubuntu) editing them with gimp, creating OpenOffice presentations and during hurricane Ike I added so he's become obsessed with weather. but I was looking for something new.

My wife suggested adding one site at a time so he could take his time with each site.

One of the really cool things about the national geographic website is that topic areas have distinct hostnames, so I could be more granular in terms of blocking access.

1226102204.230 54 TCP_MISS/200 735 GET - DIRECT/ image/gif
1226102204.253 73 TCP_MISS/200 521 GET - DIRECT/ image/gif
1226102204.268 81 TCP_MISS/200 686 GET - DIRECT/ image/gif
1226102204.438 170 TCP_MISS/200 1276 GET - DIRECT/ application/x-shockwave-flash

There is actually a pretty good music there, too. Lot's of world music My son is playing the Ben Harper song above over and over again.

What he doesn't remember is that he listened to a lot of Ben Harper on KGSR back in Austin. That and a lot of Lucinda Williams.

Good stuff. Good times.

No comments: