69

I bought my kids a PC and installed 12.04 (Unity) on it. The bottom line is, I want my children to use the computer unsupervised while I have confidence they cannot access anything inappropriate.

What I have looked at:

I was looking at Scrubit a tool which allows me configure my wifi router to block content and this solution would also protect my other PC and mobile devices. This may be overkill as I just want the solution to work on one PC.

I also did some Google searches and came across the application called Nanny (it seems to look the part). My experience of OSS is that the best solutions frequently never appear first on a Google search list and in this case I need to trust the methods therefore my question is very specific.

I want to leverage your knowledge and experience to understand What is the best way to restrict adult content on 12.04 LTS as this is important to me. It maybe a combination of things so please don't answer this question "try this or that", then give me some PPA unless you can share your experience of how good it is and of course if there are any constraints.

0

8 Answers 8

49

One easy and great way of doing it is going straight to the source and use DNS filtering for that purpose.

Let's face it, you cannot protect your children all the time from all the internet risks, but using some sort of filtering you can at least force it in your home.

One of the advantages of filtering using DNS is that even if you have a smart ass kid that knows he can bypass blocking software installed in his system using the Ubuntu LiveCD, DNS usage can be enforced in the system that use DHCP via your router.

Have a look at a DNS parental control option like OpenDSN Family Shield or Cloudflare 1.1.1.1 for Familiesfor an example on how a DNS filter would work for your computers at home. Many other DNS servers will allow you to do it, OpenDNS is just one that I use normally.

Set up an account, make the changes in your router to use the DNS servers from OpenDNS, activate parental filtering and no matter what OS your kids are using that obtain an IP via the router will be blocked from accessing issue sites.

Of course if your kids are smart enough and know how to spoof that it will be easy for them to bypass it, that again, as said before, you won't be able to protect your children all the time from all the dangers the internet presents.

9
  • 8
    +1 this as this is what I do as well. However, you should note that tech-savy kids can bypass this fairly readily. If you are paranoid, make sure that your router blocks all calls to DNS ports (UDP & TCP port 53) except for the OpenDNS servers. Jul 2, 2012 at 10:38
  • 2
    What about torproject.org? Isn't it possible to bypass DNS filtering using tor?
    – Giorgio
    Jul 2, 2012 at 16:39
  • 4
    Think the point here is that there really isn't a 100% safe prof way of securing the internet for kids. Once they grow smarter there will always be a way, lets assume that the kids have no permissions to actually change network interface settings or install software for now. Jul 3, 2012 at 6:09
  • 3
    I took your advice and created an Open DNS account and that is as good as it gets, a brilliant solution. I wanted to leave this comment here so that others can trust the sound advice from both answers here. Jul 4, 2012 at 19:16
  • 1
    I have been using the content filtering of Open DNS for many years. As my child has grown I have black-listed and white-listed a few sites and moved from high to moderate filtering. I think this is a great solution and works for other wifi enabled things like tablets etc. as well.
    – user68186
    Jul 20, 2012 at 17:48
41

The Internet is not a safe place for kids

We all know of content we don't want our kids to be exposed to, be it either accidentally or on purpose. We therefore have to do something about it. There are different approaches to gain some security but all fail when it comes to the details. Let me explain why:

Allow list / Whitelists

Whitelists securely block unwanted content and can be generated by a variety of browser plugins or parental control software but they will not last for long. We want our kids to discover the world, to learn how to operate the Internet, to learn how to find information, and to learn how to play games that are safe for them. They will not learn how to do this if they only have access to a small list of sites granted by Daddy where the next click on a button leads to the "BANNED" page. Only very young kids may be happy for some months with a whitelist.

Deny list / Blacklists

Blacklists such as offered e.g. by DNS services are meant to contain all known bad sites and block them. This task is ridiculous. We can not possibly know of all bad sites. They pop up everyday in thousands. The makers of Dansguardian filters put it like that:

The web is a fast changing place and even large web search engines such as Google or Altavista or Yahoo don't even know of half of it. This makes filtering by web address (URL) difficult as sites change and new ones come up all the time.

Content Filters

To overcome limitations of a blacklist we additionally need some sort of content filtering but it is tedious to maintain the filters. This may be good for schools when a full time employee does all the work but it is unlikely we find the time at home to do so. Using pre-made filters is likely a bad idea as the bad sites know about them and avoid those suspicious phrases to appear on their pages (look at the spam mail you get and you have an idea on how they do it).

Smart Kids

As already mentioned kids become smart, and we desperately want them to become so. Unortunately then they will also learn how to overcome most of our filters. They will (yes, they will, no matter what we do) gain access to anything they want by the time they are smart. All our blocking efforts will fail by then. Before that however they may not be interested in all that adult stuff at all. So there would in reality not be a need to block anything. By the time they are smart they need to be smart enough to know what is a bad site, and they should be smart enough to be interested in other things rather than visits on adult pages.

Smart Parents

We all are or will be smart parents. We want to teach our kids how to operate Ubuntu and how to discover the Internet. Smart parents watch what their kids do and they talk to them about what they do. We should provide them with the knowledge on what to do when they come to sites that are different or may be harmful. We want our kids to tell us what they do. Smart parents spent the time they would need to set up and maintain a parental control rather with their kids. We also should not leave the kids alone. Put the computer to a place where you can pass by and have a short look what is displayed on the screen.

In summary the "best" way to refrain our kids from visiting unwanted sites is to become a smart parent educating their kids to become smart. But I know from my own experience that this also may fail, has inconsistencies, and may likely not achieve 100% safety. It still is the best.


Note after seven years: We never had any content filters in all those years. I can see now how important all I said above was to our kids.

4
  • +1 This is a well thought out answer and very helpful and I believe I am trying to be a smart parent by asking the question I did. If my understanding is correct you are suggesting 2 approaches 1: Use dansguardian (a similar tool to Brunos previous answer) 2: Educate my kids Jul 2, 2012 at 14:05
  • 8
    @StephenMyall: honest answer, I tried with all but the time you'd need to maintain the filters is a) significant b) still leaky c) makes your kids hate you. So I gave up all except the least buggy variant - i.e. trying to be a 99% smart parent ;)
    – Takkat
    Jul 2, 2012 at 14:15
  • it looks like you have been through the pain and I am only starting with my young kids, your advise is engrained in my head, Thanks. :-) Jul 2, 2012 at 14:23
  • 1
    Many times, these filters (especially those that filter by keywords inside page or URL) censor too much. One example would be the software to Convert LIT files This is just one example. There were many One gets incentive to bypass the system, even if not looking for pornography. Not to mention that having an honest site blocked reduced my overall confidence in the judgment of the person that installed the blocker Also I am not sure it is wise to block text that might refer to sex, such the relevant wikipedia articles. Though sometimes a bit graphical, I'd consider kids safer for having them
    – josinalvo
    Jul 3, 2012 at 14:57
8

I took the advice of the selected answer to this question and used OpenDNS on my Ubuntu computer but I wanted to share more information to be helpful to others.

What is OpenDNS, and how to get OpenDNS?

OpenDNS is a free DNS service that can not only speed up your internet but also provide you options like...

  • Web content filtering
  • anti-phishing,

  • malware protection

  • smart cache and much more.

The bottom line is OpenDNS servers have a huge collection IP addresses of millions of web pages. When you look for a website, it immediately finds the corresponding IP address and hence gets it to load faster. It's intuitive and literally takes less than 10 minutes to set up (no software installation required)

To utilize all its features, all you need to do is sign-up with them here. Basic OpenDNS is suitable for your household devices is free of cost. (For business solutions there is a nominal annual fee)

Once you have signed up, you’ll get a confirmation link in your mailbox. Click on the link and it will redirect you to dashboard settings on the main website.

It will automatically detect your IP address. Click on Add this network button given below your IP address All you need to now is to follow the Instructions provided on the website and add these IP addresses to your router.

Preferred DNS server: 208.67.222.222
Alternate DNS server: 208.67.220.220

That's it! You're done

OpenDNS features

By default, nothing is blocked. You have FULL control to select one of 3 pre-sets 1: Low 2: Moderate or 3: High filtering levels

Example: If you choose “Low” filtering level then all the porn sites will be blocked . You increase the filter level to apply more restrictions. There is also a custom filtering levels that allows you to be specific or tweak one of the pre-sets.

You can block or allow any domain of your choice by entering the domain name. It also gives you the ability to add an extra layer of security as it provides malware and botnet protection as well as phishing protection. You may also block internal IP addresses.

Important note of caution:
I have been using OpenDNS for a couple of weeks now and I created a Bookmark in Firefox. Stupidly I clicked on "Remember my Password" which means anybody can click on the bookmark get into OpenDNS and make changes. I have since rectified.

7
  1. Check your Internet history files.

    This will tell you if your children are visiting any inappropriate sites. In your web browser, click on the history tab. It should open up as a sidebar. Once this happens, you can check to see what sites your children are visiting. Take note of any that you want to block.

  2. Adjust your privacy settings.

    In most browsers, the privacy tab is located under Internet options (or options), which is located under the tools tab. Once in the website section, copy the sites that you want to block from the history page, and enter them into the block site space. You can block one site at a time this way. However, in order to block sites that your children have never visited before, you will need to take other steps.

  3. Purchase a site-blocking software package.

    This will give you the additional security option of blocking any site that may have potentially harmful content from your children. Many of these programs not only block harmful sites, but also are used as a way to see exactly what your children are doing online or on the computer in general. Install the program and set the level of security you want. Usually these programs can be customized to fit your needs.

  4. Check the software and your Internet history after your child uses the computer.

    If any inappropriate activity is going on, talk to your children about it in a calm manner. If you freak out, your child will try to hide things from you even more.

  5. Place the computer in a well-used area where you can visually keep track of what the children are doing.

    If the computer is in the same room as you, your children are much less likely to do anything inappropriate. Limit Internet time as much as possible and set clear boundaries for appropriate use.

3
  • 2
    +1 for 5) but ad 1) smart kids will very soon know how to delete this history when they find out you use it for blacklisting ;) ad 3) is there any such package we could buy for Ubuntu?
    – Takkat
    Nov 9, 2012 at 7:28
  • 1
    @Takkat I agree but doing something is better than doing nothing. Nov 11, 2012 at 9:26
  • 2
    Do not add links (for example to your own site as you did) unless they contribute some value to your answer.
    – RolandiXor
    Nov 16, 2012 at 21:12
3

In addition to OpenDNS there are Parental Control Systems that are an easy way to control what your kids are doing in the computer.

  • You can limit how much time a day each one of them is browsing the web, chatting or doing email.
  • You can decide at which times of the day they can do this things as
    well.
  • You can block all undesirable webs and have your kids enjoy the
    internet with ease of mind, no more worries!

The Binary package “Nanny” for ubuntu Precise (12.04) can be found here

OR You can install the debs package from here

Note: Experienced Linux users can also try DansGuardian along with content caching using squid3 .

1
  • 1
    If only gnome-nanny reached stable soon - sighs ;)
    – Takkat
    Jul 5, 2012 at 12:41
0

Depending on your religious persuasion maybe try Christian Ubuntu flavour which when I was researching Ubuntu flavours had this as an inbuilt feature which they advertise.

3
  • 3
    This uses DansGuardian to do its filtering
    – 8128
    Jul 3, 2012 at 13:16
  • 2
    It is not an official ubuntu distro , so it is offtopic in askubuntu
    – Tachyons
    Jul 3, 2012 at 13:54
  • 2
    -1 The Christian Ubuntu flavour is on an unsupported platform v9.04 only. ubuntuce.com/features.htm Jul 3, 2012 at 15:59
0

An alternative solution would be to setup a Pie Hole server at home, here is a complete tutorial on how to do just that.

http://www.ubuntuboss.com/how-to-install-piehole-on-ubuntu-16-04/

Pi Hole is a nifty open source project that allows you to offload the task of blocking advertisements and annoying (and often malicious) trackers to a Raspberry Pi or in this case an Ubuntu Server. The installation is really simple and it is basically a dns server that can be configured via a simple Web Interface with multiple block lists from around the Web.

0

Use MoralDNS (https://github.com/RoelVdP/MoralDNS).

Full disclosure; I am the maintainer.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .