[3614] in WWW Security List Archive
Re: Message not deliverable
daemon@ATHENA.MIT.EDU (Bill Casti, CQA)
Fri Nov 22 19:10:17 1996
Date: Fri, 22 Nov 1996 17:05:58 -0500 (EST)
From: "Bill Casti, CQA" <quire@casti.com>
To: www-security@ns2.rutgers.edu
In-Reply-To: <9610218486.AA848646031@mfi.com>
Errors-To: owner-www-security@ns2.rutgers.edu
SurfWatch has a version that you can install on a server, rather than on
a desktop. It utilizes their database of pre-reviewed sites and which you
can update periodically from their server. Check their website
www.surfwatch.com for more information. I imagine that other
site-blocking software manufacturers will be coming out with server-based
software tools, too, so you might want to contact some of the other
manufacturers of that kind of software, like Net Nanny, etc.
And, yes, I do believe that freedom of information includes all
information, not just that with which I agree.
Regards.
Bill
On Thu, 21 Nov 1996, Administrator wrote:
> Henry Lim Chee Wee wrote:
> >
> > Perhaps I would need to clarify the situation here.
> > My question was posted over the www-security mailing list
> > because of a genuine concern regarding public access.
> > The machines to be fitted with the website restricted access
> > software ( or accessed the Internet through a proxy server
> > and/or firewall ) are not meant for adults working within
> > an organisation. It's for pubic access areas (i.e. Libraries)
> > where both adults and children mingle freely.
> >
>
> Dear Mr. Wee,
>
> There are tens of thousands of web sites with questionable
> content, and I don't see how each one can be restricted until
> someone has reviewed each site and made a determination as to
> acceptability based on local laws. Provided you were given a
> list of I.P.'s that have been somehow "pre-qualified" or
> pre-determined to be unsuitable in content for children, then
> to my knowledge most web-proxy servers can block users from
> having these banned I.P.'s delivered by the web-proxy to their
> workstations. My advice is to search the Internet for books
> specifically addressing your server. For example, if you have
> the Apache server, there are some excellent books found at
> http://www.amazon.com, one of the largest Internet booksellers.
> Simply search under key-words "Apache" and "server."
>
> > The main concern here is porno sites. I am sure adults like you
> > and me are fully capable of getting whatever information we will
> > like by whatever means possible. And I can tell you that most
> > porno sites in the Internet has no security whatsoever. Even
> > the $$$ charging farce is poorly done (which means that teenagers
> > and children can bypass it if they do not want to pay).
> >
>
> I'm still puzzled as to who is deciding which sites qualify as
> "porn" and how this effort is being undertaken? This is probably
> the one obstacle to banning sites, because you first have to know
> what sites qualify as "unsuitable" content. Playboy is an easy
> target for most countries, but other sites can be accidentally
> stumbled upon that aren't on the proxy's list of banned I.P.'s.
>
> > We have a responsibility towards the youngsters. Don't tell me
> > that a picture of a naked woman in suggestive pose is free information
> > and everyone has the right to ogre at it. There are possibilities
> > to access such stuffs in Singapore, be it from BBS, pressed cd-roms,
> > pirated video-cds,LDs,video cassettes, smuggled x-rated magazines, ftp
> > sites and the web sites. All I wanted to do is to reduce this
> > possibility, if only through the web.
> >
>
> This is a commendable effort on your part, although unpopular and
> likely to get you some flames (and myself for agreeing publicly
> with you here). The unfortunate part is that kids tend to find
> ways around tamper-proof solutions.
>
> > Just for your info, we have a firewall in place for them
> > (everyone is asking for one, *sigh*) and a proxy server as well.
> > But they are asking for something more to ease their minds and
> > hence my question.
> >
>
> I almost deleted my email when getting to this point, because
> had I known they were asking for more than technology is capable
> of delivering, I would have withheld comment. Oh well, I'll send
> it anyway, with the comment that if configuring your proxy is not
> sufficient for them, then nothing that I know about is.
>
> --
> ___
> | ._ _ ._ _.._ _ ``I do not fear computers
> _|_| |(_|| (_|| | | I fear lack of them.'' -Isaac Asimov
> _____ _| _______________________________________________________
> Key fingerprint: 93 E1 15 E6 35 BC B2 84 B2 7B 39 76 29 72 32 72
> [Signature lettering created by ``Figlet Ascii Font Converter''
> http://mediacube.datacom.de/cgi-bin/moniteurs/figlet]
>
> Received: from ns2.rutgers.edu by mfi.com (SMTPLINK V2.11)
> ; Thu, 21 Nov 96 22:43:12 PST
> Return-Path: <owner-www-security@ns2.rutgers.edu>
> Received: (from daemon@localhost) by ns2.rutgers.edu (8.6.12+bestmx+oldruq+newsunq/8.6.12) id VAA19759 for www-security-outgoing; Thu, 21 Nov 1996 21:06:14 -0500
> Received: from palrel3.hp.com (palrel3.hp.com [15.253.88.10]) by ns2.rutgers.edu (8.6.12+bestmx+oldruq+newsunq/8.6.12) with ESMTP id VAA19752 for <www-security@ns2.rutgers.edu>; Thu, 21 Nov 1996 21:06:13 -0500
> Received: from hpfsvr01.cup.hp.com (allan.cup.hp.com [15.28.74.169]) by palrel3.hp.com with ESMTP (8.7.5/8.7.3) id SAA09700 for <www-security@ns2.rutgers.edu>; Thu, 21 Nov 1996 18:06:07 -0800 (PST)
> Received: from allan by hpfsvr01.cup.hp.com with SMTP
> (1.37.109.15/15.5+IOS 3.20+cup+OMrelay) id AA031138255; Thu, 21 Nov 1996 18:04:16 -0800
> Message-Id: <32950A1E.1811@cup.hp.com>
> Date: Thu, 21 Nov 1996 18:04:14 -0800
> From: Gene Ingram <gene@hpfsvr01.cup.hp.com>
> Reply-To: www-security@ns2.rutgers.edu
> X-Mailer: Mozilla 3.0 (X11; U; HP-UX A.09.05 9000/720)
> To: www-security@ns2.rutgers.edu
> Subject: Re: configuring a site to ban porno/violence www access... (fwd)
> References: <1.5.4.32.19961102113537.00682968@cyberway.com.sg> <327D5396.435F@ncs.com.sg>
> Sender: owner-www-security@ns2.Rutgers.EDU
> Precedence: bulk
> Errors-To: owner-www-security@ns2.Rutgers.EDU
>
>