PDA

View Full Version : Linux server internal win box (sigh)


jbarby
14th July 2004, 03:34 PM
SPYWARE on my parents windoze PC ARGH!!!!!!!!!!!

TO get the obvious out of the way

My parents would not appreciate me completely formatting and loading fedora

I have loaded Mozilla Firefox and have told them time and time again not to use Internet Explorer I even changed some of the shortcuts but somehow they always get into IE (sigh)

I am getting tired of cleaning spyware off

THIS MEANS WAR!!!

I am going to place (again) a linux router/firewall between my internet line and the internal lan (instead of the simple wireless hardware router)

I was also thinking of subnetting their pc's and placing tighter firewall restrictions as they do not use that many applications. But I need more open ports for some applications I use. However they do not need to be exposed. :D

However this still wont kill all spyware that gets loaded on the pc through port 80 :(

So I am now thinking of setting up a proxy server on the linux box as well to block spyware domains (much like a hosts file except centeralized so its easier for me to manage)

I have downloaded the extension AdBlock for firefox that will block images and scripts from even loading on the web page. However my parents will most likely be using IE :mad: . If I just blocked the domains It would not be clean small boxes with images missing, popups with nothing in them (you get the idea). So is there an a way to setup a proxy server in fedora to where it will download the web page and reparse the webpage omitting domains that I specify in a file before passing it onto the internal winbox's browser so I can block spyware before it even hits the machine :confused: (I know that this would increase latency a little bit). Does some extension to Squid have this capability

Jman
15th July 2004, 03:47 PM
I found a filter patch for squid (http://sites.inka.de/sites/bigred/devel/squid-filter.html) with plenty of filtering options. I don't know if it will work with the newer Fedora squid, though.

Also see the list of related squid software (http://www.squid-cache.org/related-software.html).

Good luck with your project. Please share any solutions as stopping junk is a big priority right now.

Varkk
15th July 2004, 03:57 PM

Why do they keep using IE? You could always tell them that you won' fix it if they use IE. Another thing to do is to put Firefox where the common IE shortcuts are, but with the IE icon and use the IE skin for firefox, they will never know.

Jman
15th July 2004, 04:15 PM
And change the default web browser, if you haven't already.

Unfortunately, that's about as much as you can do to "remove" IE. Maybe you can set the security settings higher, but lose some functionality.

Or automate the spyware removal?

What Windows version is it, by the way?

jbarby
15th July 2004, 05:30 PM
Why do they keep using IE?

Unfortunatly a few banking sites will not at all work with firefox as well as a coule other types of sites that use Ie specific code :(

But the I find them also using IE for basic browsing which firefox can indeed be used and *****ing about popups :rolleyes:

And you know the ads that attempt to trick you by having a picture with an x to close the window but the entire picture is a link. My mom clicked it like 3 or 4 times trying to close it LOL. ( I told her what it was)


Or automate the spyware removal?

What Windows version is it, by the way?

Automate spyware removal I hope to keep it from appearing in the 1st place :D

Parents PC is Win XP
Sisters PC is WinME
My laptop is WinXP (needs GPS)
My desktop will be Dual Boot
My 2nd desktop (for friends browsing, games) winxp
Server will be Fedora
Dad's laptop Win 2000

ssaady
3rd September 2004, 04:04 PM
You could put Squid and Privoxy on the Fedora host, and point their browsers to proxy off the Fedora host's IP address, on the Privoxy port number (default of 8118). Then, Privoxy is pointed at the "upstream proxy" of localhost on port 3128 (default Squid port). I am experimenting w/ this now, and would be interested in hearing anyone's experience w/ Privoxy or Squid related to stopping spyware, ads, and any other cr@p traffic that does not serve the user.

One other thing, get yourself an ad blocking hosts file on ALL of the concerned PCs.

www.Privoxy.org
http://www.mvps.org/winhelp2002/hosts.txt

ewdi
3rd September 2004, 04:08 PM
sadly there is no way to take out IE completely :(

ssaady
3rd September 2004, 04:09 PM
sadly there is no way to take out IE completely :(

Sure there is.
http://www.fedora.redhat.com/download/

ewdi
3rd September 2004, 04:12 PM
hahah that one is a good way :)