Wifi Internet filtering in church sanctuary

[Tech in SC]

I have a church that wants to fire some wifi into their sanctuary and filter it as to not allow objectionable content.

Getting the wifi into the sanctuary in itself will be a challenge (considering the budget I'm working with as well as the building is wall after wall of cinder blocks... no drywall in this one.)

I think I have a long range wifi solution using Ayrmesh but I'm open to suggestions.

My main question is what would you recommend for content filtering? It can't be client side filtering since anyone in the church sanctuary can access the Internet with whatever devices they may have.

All comments, recommendations, thoughts are appreciated.

 

[PCX]

Most content filtering sucks, but a great open source alternative is dansgaurdian. You can set up a cheap low budget server that does nothing more than filter the internet using dansguardian. There are a few other options out there, but I have not messed with this particular stuff in a while.

 

[MotzTech]

It may not work with a limited budget, but you may want to look into untangle. You can either use a untangle HW device or install your own HW. Here is a link to a calculator you can use to calculate costs. Make sure to select the non-profit option, as that can lower the cost.

http://www.untangle.com/store/configurator/

They also have a lite version that is free, but It probably won't do what they are looking for.

http://www.untangle.com/store/web-filter.html

 

[YeOldeStonecat]

Another vote for Untangle.
Or...if the church needs a bit more of a server/e-mail system..check out "ClearOS". I'll be doing one of those setups for my old church I grew up going to soon..volunteer / free project.

 

[MotzTech]

Are you using the free version of ClearOS? I have a ministry in mind that may be able to use something like that.

 

[YeOldeStonecat]

I'll give the free edition a shot at first.....and see if the basic content filter in the free one will be adequate. Combined with OpenDNS..should suffice quite well "for free".

 

[Tech in SC]

@YeOldeStonecat... The free version of OpenDNS?

 

[ZenTree]

re the connectivity point (since the others have already covered what I was going to say re content filtering), would powerline adapters be feasible here? save on the problem of many thick walls and they've come down a LOT in price.

 

[YeOldeStonecat]

@YeOldeStonecat... The free version of OpenDNS?

Both ClearOS (basically the open sourced version of Microsofts Small Business Server Premium)...and OpenDNS.

Untangle also has a free (Lite) version....Untangle is a UTM appliance (Unified Threat Management)...think of it as a super firewall/router/edge appliance...it takes the place of the typical little linksys/netgear router...but adds so many cool features.

 

[Slaters Kustum Machines]

I thought I would check out ClearOS, but the download links from this page : http://www.clearfoundation.com/Software/downloads.html aren't working....

 

[YeOldeStonecat]

I thought I would check out ClearOS, but the download links from this page : http://www.clearfoundation.com/Software/downloads.html aren't working....

Just tested by clicking on one (the 64 bit one)....flying down on my laptop at over 3 megs.

I've run that distro at home before...it's VERY slick....very well done. It's a continuation/fork of a product you may have heard of before..."ClarkConnect".

 

[Slaters Kustum Machines]

Just tested by clicking on one (the 64 bit one)....flying down on my laptop at over 3 megs.

I've run that distro at home before...it's VERY slick....very well done. It's a continuation/fork of a product you may have heard of before..."ClarkConnect".

Sure enough, working now. When I tried to download earlier I was redirected to a page that referenced ClarkConnect.

 

[YeOldeStonecat]

Have fun playing with it. I dunno if you have experience with Small Business Server, but it's a pretty slick job they did with ClearOS.

And the router/firewall portion of it is quite well done also...not too different from PFSense...a little more on simple terms. Quite fast too.

If they needed a server to store files 'n stuff on...and do e-mail and some collaboration, I'd say learn ClearOS and give it a shot.

if you just want a content filter firewall at the edge, give Untangle a shot.

 

[Slaters Kustum Machines]

Have fun playing with it. I dunno if you have experience with Small Business Server, but it's a pretty slick job they did with ClearOS.

And the router/firewall portion of it is quite well done also...not too different from PFSense...a little more on simple terms. Quite fast too.

If they needed a server to store files 'n stuff on...and do e-mail and some collaboration, I'd say learn ClearOS and give it a shot.

if you just want a content filter firewall at the edge, give Untangle a shot.

I do not have any experience with SBS, but wish I did and I like Untangle at home and would recommend it to small businesses as well. We'll see how ClearOS treats me. Would there be any benefit to running both on the same network for added layers or would they conflict with each other too much?

 

[YeOldeStonecat]

Eh..you could run Untangle in "bridged mode" (single NIC) behind ClearOS without much hassle I'd wager. I'm not fond of double firewalling networks though, I prefer a single unit at the edge doing the work.

That said, I'm not a fan of SBS Premium being at the edge either with its ISA...I usually did those setups behind a NAT router (hardware firewall) with SBS running on a single NIC.

I have not broke the mold with ClearOS and tried to set it up on a single NIC without it's firewall....perhaps it can be setup as a just a server doing "Server stuff" and you can do Untangle at the edge. If it were winter time....I'd go download ClearOS again and try this...but it's almost summer time...so I try to depart early (leaving my last onsite now to head home)...fire up the grill, work in the yard, swim in the pool, chase the wife around, etc). So you can play with various setup options. Enjoy..gotta hit the road and get home!

 

[Tech in SC]

I've downloaded ClearOS and downloading untangle now. Can untangle run as a VM? or will I need to dedicate a PC to this? 2 NICs a must?

 

[YeOldeStonecat]

Untangle can run virtualized. As can ClearOS (I've run them both virtualized on a dual core Atom at home...one at a time).

Untangle..you use 2x NICs if you're going to use it as your only router/firewall. Red NIC (outside), Green NIC (inside). I always set it up that way. There is a step by step guide in Untangles WiKi.

You can also run Untangle with 1x NIC in bridged mode when placing it behind your own existing router. Basically (through some black magic) it spoofs the gateway of your network and all traffic passes through it as if it's the gateway...and then out the same NIC Untangle passes traffic out the real gateway (the actual router you have at the edge)

 

[glricht]

I have a church that wants to fire some wifi into their sanctuary and filter it as to not allow objectionable content.

Getting the wifi into the sanctuary in itself will be a challenge (considering the budget I'm working with as well as the building is wall after wall of cinder blocks... no drywall in this one.)

I think I have a long range wifi solution using Ayrmesh but I'm open to suggestions.

My main question is what would you recommend for content filtering? It can't be client side filtering since anyone in the church sanctuary can access the Internet with whatever devices they may have.

All comments, recommendations, thoughts are appreciated.

WOW! I have a number of churchs as customers and NEVER had one that wanted to provide wifi in the sanctuary for their congregation! They usually have enough trouble getting people to turn off their cell phones so they don't interrupt the service, let alone provide Internet access.

Have had a few that wanted network access for the PC that runs the service (e.g. Mediashout, EasyWorship). The simplest solution appeared to be wifi, but rarely did it work well due to walls and other obstructions. Power Line adapters rarely worked since the sanctuary was usually on a separate electrical box. For most, we literally had to run cable from one building into the other (if I recall, one was a 175 foot run). If you do this and still want wifi, once you're inside the sanctuary, you could attach an access point (or a router with its DNS manually set to OpenDNS).

 

[PCX]

WOW! I have a number of churchs as customers and NEVER had one that wanted to provide wifi in the sanctuary for their congregation! They usually have enough trouble getting people to turn off their cell phones so they don't interrupt the service, let alone provide Internet access.

Have had a few that wanted network access for the PC that runs the service (e.g. Mediashout, EasyWorship). The simplest solution appeared to be wifi, but rarely did it work well due to walls and other obstructions. Power Line adapters rarely worked since the sanctuary was usually on a separate electrical box. For most, we literally had to run cable from one building into the other (if I recall, one was a 175 foot run). If you do this and still want wifi, once you're inside the sanctuary, you could attach an access point (or a router with its DNS manually set to OpenDNS).

Yeah, I agree, its a very poor and unwise decision on their part.

 

[Rob_NNCC]

Yeah, I agree, its a very poor and unwise decision on their part.

I am not sure about that one, one of the largest faiths in America, the LDS church (14.4 Million members) has Wifi in most branch and ward buildings. The wifi is secured by wpa/wpa2, the password is handed out on a need to know basis and the firewall is remotely managed by Salt Lake City.

The LDS church has been called sheltering and for them to put it in means that they have done alot of thought over it.

Source: I am LDS