The officially official Devuan Forum!

You are not logged in.

#1 2017-01-16 06:49:39

ralph.ronnquist
Administrator
From: Clifton Hill, Victoria, AUS
Registered: 2016-11-30
Posts: 1,106  

DIY "rrq Parental Internet Packet Filtering"

Announcing https://github.com/ralph-ronnquist/rrq

This Parental Internet Packet Filtering is a blacklist based network traffic filter to block access to certain domain names for all or some outbound and/or forwarded HTTP and SSL traffic.

The blocking principle is simply to detect and discard any IP packet that constitutes the initial handshake of an HTTP or SSL connection to a blocked domain. By discarding these initial packets, the blocked domains become inaccessible.

The project includes two alterantive daemons: "rrq_nfq" for iptables based filtering, and "rrq_vde" for use on a VDE cable chain. Includes "make deb" for building a Devuan (.deb) package.

Offline

#2 2017-01-21 03:27:59

ralph.ronnquist
Administrator
From: Clifton Hill, Victoria, AUS
Registered: 2016-11-30
Posts: 1,106  

Re: DIY "rrq Parental Internet Packet Filtering"

I've moved this project to gitlab,  https://git.devuan.org/ralph.ronnquist/rrq.git, and included control scripts with a full setup of tun interfaces, routing and iptables rules, as an OOTB filtering solution. Though, it doesn't include block list files; I only have the ones I bought, and no free ones.

There's also an HTTP admin tool for the brave hearted.

Offline

Board footer