Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I would like to learn more about how the following works

I have visited their web sites but I am having problems finding anything more then just basic information, and I would like a more in-depth understanding.

Please point me to a good e-book, reference or tutorial about these. I would like to setup them up on my computer for professional work.

share|improve this question
up vote 1 down vote accepted

I can tell you how Squid and Dansguardian works.

Squid is an HTTP proxy. This means instead of a browser sending HTTP requests directly to the destination address they want to contact, it gets sent to Squid instead, which under normal circumstances will reissue the request to the destination address, receive the reply, and forward the reply back to the original requesting browser.

Where things get interesting is in Squid's ability to do more than just simple forwarding. One thing it's famous for is caching; this is where it keeps frequently accessed pages on disk, and uses the disk to fulfill requests instead of contacting the destination server for the same page over and over.

Another thing is filtering; Squid can, in response to a HTTP request, send back an error page (saying the page is blocked, for example) if the URL matches patterns, or if a script denies that URL. Dansguardian works like this I believe; a script is executed for each HTTP request that checks the URL, and issues an approve or deny answer to Squid.

Now, unless you want users to bypass this easily, Squid must be the only way for HTTP traffic to get in and out of your network. Browsers can be explicitly set up to use proxy servers, but a better way is to set up Squid for transparent proxying on or near a gateway device in a network. You'll need to configure your gateway device to redirect all outgoing port 80 traffic to Squid's IP and port. This makes Squid receive all outgoing traffic on port 80, intercepting all HTTP requests transparently, thereby forcing all users to go through the proxy. Then any policies implemented on Squid will apply to all users in that network.

share|improve this answer
thanks for the explanation but if you will find more details about it then please post the link of that – Peeyush Oct 3 '10 at 8:04

DansGaurdian is a content filter add-on compatible with IPCop, which utilizes Squid. IPCop doesn't ship with DansGaurdian, but the Cop+ distribution, which I use, does. You can get general support for IPCop at its support site,

If you choose to install the Cop+ distribution, be careful about applying IPCop updates, because they have a tendency of writing over the DansGaurdian configurations.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.