Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm looking for a solution that allows our office server to function as a proxy that blocks access to certain websites for certain LAN ip's.

The solution i'm looking for has to meet these requirements:

  • run on ubuntu server
  • restrict access to certain websites based on a LAN ip (eg: shut out for
  • restrict access to a website based on the website url (eg: shut out *
  • easily configurable (preferably through a web interface, our office manager should be able to operate it thus no commandline fu if possible)
  • preferably opensource

Thanks for your time!

share|improve this question
Does want you want, Open source, Easy to use - pick two... – Jon Rhoades Mar 30 '10 at 9:53
up vote 1 down vote accepted

Should fit your needs.

share|improve this answer
Thanks, although not open source the GUI is the clear winner here over squid. I don't want to imagine our manager to work in webmin and configure squid, untangle seems to solve most of that. – ChrisR Feb 22 '11 at 9:37

SQUID can do all that for you, except the web interface configuration, but for that you can try the Webmin plugin for Squid.

share|improve this answer

To get the flexibility you are looking for in filtering I'd add SquidGuard to the list. Although it doesn't have a web GUI for configuration, it will let you define block lists by defined ranges of users and/or IP's on your LAN, and even by hour of day. Additionally both Squid and SquidGuard support LDAP so they can be integrated with Active Directory if you have it, to allow some ease of management. You could make some groups in your directory and then have someone else just modify user group membership that way.

I hear good things about Dan's Guardian but I've never actually used it. It's basically several packages bundled up with Squid and may have a web interface, but don't quote me on that.

You have plenty of choices here:

share|improve this answer

I'm pretty sure that you could do all of this (except you wouldn't need to run it locally - i.e. the Ubuntu/open source requirements go away) by switching from your ISP's DNS servers to OpenDNS.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.