[ale] New school.

Jim Lynch ale_nospam at fayettedigital.com
Fri Apr 1 15:40:03 EDT 2016


I see that except here it says

This article will tell you how to install and configure Squid proxy 
capable of filtering encrypted HTTPS connections using Diladele Web 
Safety ICAP content filtering server running on pfSense firewall 2.1. 
Being able to look into HTTPS contents greatly increases your ability to 
control what is allowed and accepted within your network while keeping 
inappropriate contents away.

Wonderful.  Except Diladele Web Safety ICAP content filtering server 
costs $28/user/year.  That's double what we have budgeted for networking 
and phone.  I can't find any CIPA filtering for less than that.  OpenDNS 
is priced about the same.

On 04/01/2016 03:16 PM, dev null zero two wrote:
>
> pfsense's squid 3 package can be configured to mitm https
>
> Sent from my mobile. Please excuse the brevity, spelling, and 
> punctuation.
>
> On Apr 1, 2016 3:14 PM, "Jim Lynch" <ale_nospam at fayettedigital.com 
> <mailto:ale_nospam at fayettedigital.com>> wrote:
>
>     If I'm reading things right, that solution doesn't address HTTPS.
>
>     On 04/01/2016 02:25 PM, Dustin Strickland wrote:
>
>         Either pfsense or ClearOS should do it. Pfsense is much leaner
>         though.
>
>
>     _______________________________________________
>     Ale mailing list
>     Ale at ale.org <mailto:Ale at ale.org>
>     http://mail.ale.org/mailman/listinfo/ale
>     See JOBS, ANNOUNCE and SCHOOLS lists at
>     http://mail.ale.org/mailman/listinfo
>
>
>
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo



More information about the Ale mailing list