[04:28] <nrdb> can you scan from a ltsp terminal?
[08:51] <Capso> Gnome Nanny seems unstable and I cannot filter EVERYTHING and allow only some sites...
[08:51] <Capso> so what other parental control software is available?
[08:55] <alkisg> I haven't used nanny, but to block everything except for a few sites, you could also use squid
[08:56] <alkisg> And of course you could stop using a dns server :D and only put a few entries in /etc/hosts
[08:57] <Capso> yeah, but what about those really smart 6 year olds who can grab google's IP and search for IP addresses or dns servers or... :P
[08:58] <alkisg> You really have 6 year old kids that can do that? :D
[08:58] <alkisg> Without sending a hostname, many sites won't reply if you use their IPs
[08:59] <alkisg> (because usualy there are multiple sites hosted on the same machine)
[08:59] <Capso> she'll just proxy to some zombied networks
[08:59] <Capso> :P
[08:59] <Capso> squid sounds like a good idea though
[09:00] <Capso> I've never really set it up before
[09:00] <alkisg> With squid in transparent mode you're able to cut all of these examples you mention
[09:00] <alkisg> For a local installation, you can use iptables, I don't know of any good GUI frontends though
[09:00] <Capso> nah, iptables is too much
[09:01] <Capso> how about dansguardian?
[09:01] <Capso> does that have an option like I mentioned?
[09:01] <Capso> and a nice interface?
[09:02] <Capso> also, there are two "squid" packages: internet object and server admin
[09:02] <alkisg> It shouldn't be difficult to tell iptables to only allow a few sites
[09:02] <alkisg> I haven't use dansguardian, but how does it enforce its policy without iptables?
[09:03] <alkisg> What if someone just downloads firefox 5 from the net and runs it?
[09:03] <Capso> I meant iptables would be "too much" for the person that I am guiding, to manage it
[09:03] <Capso> my girlfriend's not the computer type
[09:04] <Capso> I'm sure dansguardian actually uses iptables behind the scene
[09:04] <alkisg> You can have a text file with allowed sites
[09:04] <alkisg> And a script that puts those to the iptables allowed list
[09:05] <alkisg> Nothing difficult in that
[09:05] <alkisg> OK then dansguardian sounds like it fits your use case
[09:07] <Capso> hmm, even with dansguardian, you need iptables rules to make everything actually go through dansguardian, don't you?
[09:08] <alkisg> I think you're supposed to install dansguardian (or squid in transparent proxy mode) in another PC, which will act as the gateway of your "protected" pc?
[09:09] <Capso> yeah, in which case if you want to do it all in one pc then you have to use iptables trickery
[09:09] <Capso> i.e., redirect everything to the dansguardian port
[09:11] <alkisg> Yeah I imagine that will be required in order to properly filter everything
[09:11] <Capso> how the hell would gnome nanny get around this shit?
[09:12] <Capso> oops, pardon my farsi
[09:13] <alkisg> Maybe it's oriented to actual 6 year old kids who cannot search for and use proxy servers :D
[09:14] <Capso> oh you think it just messes around with dns settings?
[09:15] <alkisg> Maybe it forces the gnome proxy server to itself?
[09:16] <Capso> hrm, mebe
[09:16] <Capso> anyways, it seems completely defunct as of Edubuntu version 11.04
[09:16] <Capso> so whoever runs the website shouldn't taut it as much