NxFilter is a freeware DNS filter that can compete with commercial products in terms of functionality and performance. This limitation can be solved with the help of a DNS filter, which can monitor all the traffic, regardless of the protocol used to send or receive data. However, latency is not the only problem: Proxy servers primarily specialize in filtering HTTP connections. These latency problems grow with the number of users. The use of such filters, often employing the Squid proxy server and similar tools, leads in practice to serious latency problems on the network because the proxy server analyzes and filters the web traffic and thus becomes a bottleneck. Udp 0 0 0.0.0.0:69 0.0.0.Web filters that are based on the HTTP proxy server principle are part of the standard toolkit for protecting corporate networks. It looks as though dnsmasq is still handling DHCP from the output of netstat but again, I’ve not tested it:Įdited for httpd]# netstat -tunap | grep ‘dnsmasq|java’ I haven’t tested DHCP but by the changes I made, NxFilter handles DNS for the system. It disables dnsmasq from handling DNS queries as far as I know. Having done all that, I did find another DNS filter that, I think, would be more suitable for native integration into NethServer, Pi-Hole: Īs time permits, I’ll set that up and compare the options. This project can then likely wait for Portainer to be more production ready. This way, NethServer is intact and its DNS is simply pointed at the filter.
NXFILTER SSL FILTER INSTALL
The next step was to re-instate DHCP services, yet, by then, I realised a better solution would be to install in a container: That, again, was reasonably trivial to install with nethserver-docker (portainer). I disabled NethServer dnsmasq, changed the nxfilter GUI ports and adjusted the firewall etc. It is fairly trivial using the RPMs IF you install (eg) webtop first - thanks to the webtop_team who have covered the installation of java etc dependencies. I did actually install it on a clean NethServer today. Thanks for setting up this feature discussion have used squid and web proxies in the past but moved to DNS filtering as I found it a more reliable way to categorise and block sites. Maybe we can re-use parts of those modules (for instance installing openjdk)
we already have a few java based modules. We need to adapt those commands to the ‘NethServer way’ of adding services and opening ports.Īlso, NxFilter is a java application. The latest packages can be found here: RPM’s are available from a 3rd party repository: Īlso that howto mentions opening ports in the firewall.
NXFILTER SSL FILTER DOWNLOAD
I found an install howto for centos7, but that howto uses an old repository to download the NxFilter RPM’s.
At the moment the solution that is implemented for NethServer for filtering online content is SquidGuard.
0 kommentar(er)
