LARGE proxy ACLs...

Like… 800000 of em. :smiley:

I wrote a script that parses the http://www.shallalist.de/ porn and proxy lists and tried it on a RB433 w/ 128mb ram and 512 flash.

Script works great. The router cant handle it, though. I figured it might happen. The list is about 15mb and in in MT fashion, a script is about 50mb.

Memory went down to about 2mb free after about 15000 entries.

Basically, Im trying to setup hotspots that may be used in family restaurants and the owners dont want “explicit” material showing up on peoples laptops for sally 3yr old to see.

Is there some way that Im not seeing that we can have an indexed list simply stored on the partition that the web proxy refers to instead of holding the entire list in memory?

At this point, the only thing I can think to do is forward to a central squid proxy server over a VPN connection. This wouldnt be so bad if it was JUST the wifi users, but the restaurants business computers would be using the same proxy. Id hate to have 100 customers call with an internet outage at the same time because something happened to my colocated server/ISP.

Any ideas?

Mostly RB450Gs w/ external APs and a few RB433AHs in the mix.

Good first post? :smiley:

that list is kept into RAM to speed up lookups, and you do not want these lookups have high latency. Your choices are somehow consolidate that list that you filter out explicit words not whole urls, you can filter using regexps (see manual what is supported)

why not use OpenDNS and select what kind of material can be accessed? :laughing:

I actually did end up using OpenDNS. Works like a champ!