NetPurifier Version 3, User Manual

Page 1: ...Version 3 September 1 2003 ...

Page 2: ...he part of NetPurifier NetPurifier makes no commitment to update or keep current the information in this User s Guide and reserves the right to make changes to this User s Guide and or product without notice NetPurifier assumes no responsibility for any inaccuracies and omissions that may be contained in this User s Guide If you find information in this User s Guide that is incorrect misleading or...

Page 3: ...ser s Guide 1 5 Getting Started 1 6 Installing NetPurifier 2 1 Installation 2 1 Location 2 1 AC Power 2 1 Network Connection 2 1 Power On and Indicator Lights 2 2 Connecting a browser to NetPurifier 2 2 Windows 2000 XP 2 3 MAC OS10 2 3 Making a connection 2 4 Configuring NetPurifier 3 1 Security Configuration 3 1 Changing the default password 3 2 DNS Gateway Configuration 3 4 Network Interfaces IP...

Page 4: ...outer Compatibility Mode 3 14 Changing levels lists and messages 3 15 Changing Levels 3 15 Filter Matrix 3 16 Adding to the Exception Site list 3 20 Adding to the Exception IP list 3 21 Changing the Access Denied page message 3 22 Add to Banned Site List 3 23 NetPurifier Operation 4 1 Network Flow 4 2 How NetPurifier filters 4 2 Blacklist 4 3 Smart Filter Technology 4 4 Troubleshooting A 1 Contact...

Page 5: ...ropriate content Features NetPurifier offers the following features Stops access to pornography hate and gambling sites Blocks downloading of harmful and illegal files including mp3 music files Filters networks as large as 230 computers Three types of filtering with Smart Filter Technology Four sensitivity levels configured for different age groups 500 000 site Blacklist updated daily or weekly Bu...

Page 6: ...ess has already been deemed inappropriate The product then looks at the site rating searching for the industry standard rating tags Finally NetPurifier scans every word on the Internet page looking for words that indicate inappropriate content The context of these words is then analyzed to determine if the page should be blocked This greatly reduces the number of false positives while blocking tho...

Page 7: ...ng exe mp3 dll avi visual basic extensions and many more are not allowed Many automatic program updates will not work with this setting Level 2 This level is suggested for Elementary Schools Porn hate hacking and gambling are not allowed Web based email is not allowed at common sites such as Hotmail and Yahoo Downloading of files excluding mp3 and exe is allowed Level 3 This level is suggested for...

Page 8: ...ur network Chapter 3 Configuring NetPurifier describes how to configure NetPurifier This includes setting up DHCP DNS Gateway and changing Sensitivity Levels Chapter 4 NetPurifier Operation describes the operation of NetPurifier Appendix A Troubleshooting provides information for troubleshooting NetPurifier Appendix B Contact Information provides contact information including telephone numbers add...

Page 9: ...move to the first page in that chapter or appendix Conventions in This User s Guide This User s Guide uses the following conventions Notes are information requiring extra attention Tips are helpful procedures or shortcuts for simplifying a task Important is information that if not followed may affect the proper operation of the product Warning is information that if not followed or understood may ...

Page 10: ...55 255 0 Primary DNS _________________________ Secondary DNS _________________________ Network Gateway _________________________ If you will be using Net Purifiers built in DHCP server the following additional information may be needed Static IP device 1 _________________________ Static IP device 2 _________________________ Static IP device 3 _________________________ 2 Install NetPurifier as desc...

Page 11: ...he network that is to be filtered AC Power Connect the supplied AC Power cord to the NetPurifier and a properly grounded 115VAC outlet Network Connection Connect either the supplied network cable 6ft or your own network cable between the NetPurifier s network connector and a port on your hub or switch NetPurifier works on 10baseT and 100baseT networks Note NetPurifier may be connected to any point...

Page 12: ...ll indicator lights will extinguish Connecting a browser to NetPurifier Configuration of NetPurifier is done by way of TCP IP using a Browser The following browsers have been tested with NetPurifier Internet Explorer 4 or newer Netscape 4 or newer Opera NetPurifier is configured from the factory for the 192 168 1 0 255 255 255 0 subnet If your network is already using this subnet then you are read...

Page 13: ...u are using 3 Double click Internet Protocol 4 Set the IP address Subnet mask and Default gateway as shown in Fig 2 1 Figure 2 1 Setting Windows2000 XP IP Address MAC OS10 Note After configuring NetPurifier to your network subnet you may then set your computer back to its original network settings ...

Page 14: ...ction NetPurifier is accessed by pointing your browser to 192 168 1 9 10000 Upon a successful connection you will see Figure 2 2 Webmin Login You are now ready to configure NetPurifier as described in the next chapter ...

Page 15: ...o Webmin Webmin is the web based interface used to configure NetPurifier Figure 3 1 Webmin Login The default Username is netpurifier The default Password is netpurifier Note It is recommended that you immediately change the default password to a password of your own choosing This is described below ...

Page 16: ...ure 3 2 Select Webmin Users After clicking on Security you will be presented with a choice of Webmin Users Clicking on Webmin Users will bring up the Webmin Users menu By clicking on netpurifier you will be able to change the default password Changing Default Password Figure 3 3 Changing Default Password ...

Page 17: ...o click on Save Important NetPurifier is factory configured to allow login access from any computer on the local network after proper authentication This access may be further limited by entering the IP of only the computer s that you want configuring NetPurifier in the User IP Access control dialog box ...

Page 18: ...iguration In this section the DNS and Gateway settings of your network will be configured To access these settings click on DNS Gateway and then on Network Configuration You will be presented with the following choices Figure 3 5 Network Configuration Choices ...

Page 19: ...255 255 255 0 If your network does not use this subnet then change the IP of NetPurifier as described in this section Click on Network Interfaces This will expose the Active Interfaces Now dialog Figure 3 6 Selecting Network Interface Click on Interfaces Activated at Boot Time This will expose the Active Interface Parameters ...

Page 20: ...NetPurifier If you do not remember the information entered you will not be able to reconnect with NetPurifier Change the Netmask and IP Address to reflect your network requirements When completed click on Save Figure 3 7 Entering IP and Subnet Mask Continue to the next section Routing and Gateways ...

Page 21: ...the IP address of the Internet Gateway that NetPurifier will use to access the Internet This may be the same Internet gateway address as client computers were previously using to access the Internet When completed click on Save Continue to the next section DNS ...

Page 22: ... are using When completed click on Save Completing the DNS Gateway Configuration Figure 3 10 Apply Configuration The final step in completing the DNS Gateway configuration is to click the Apply Configuration button Warning This step will change the IP of NetPurifier You must reconfigure the computer you are using to configure NetPurifier to reflect the new IP and subnet ...

Page 23: ...ers DNS Gateway setting to reflect your networks IP Subnet 2 Change your existing DHCP server to point client computers to the NetPurifier IP gateway Using the NetPurifier DHCP Server NetPurifier has a built in DHCP server It is factory configured but not activated when shipped If you use the NetPurifier DHCP server you will need to modify the existing factory configuration to meet your network pa...

Page 24: ...ent IP address as shown above to expose the DHCP subnet settings Figure 3 12 Setting the DHCP Subnet The above example shows the factory defaults for setting the DHCP Subnet If your network uses a different subnet then replace the values shown with your network s settings ...

Page 25: ...k uses different settings then replace the values shown with your network s settings Figure 3 13 Entering Client DHCP Option Starting and Stopping the DHCP Server Upon completion of configuring the DHCP server the server must be started Click on Apply Changes Start Server as shown in Fig 3 13 to accomplish this task ...

Page 26: ...r to peer music sharing and instant messenger chat By default Port Blocker allows all ports Figure 3 14 Port Blocker Commands Note Port Blocker is not a firewall NetPurifier is designed to sit inside the trusted network It will block ports to and from the firewall to control application access but is not designed to protect the network from outside factors ...

Page 27: ...er will close all ports and then open only the ports that have been selected Note Port Blocker will never block browser access to the Internet Port 80 Additionally certain ports are required to be open to allow proper operation of various applications Note Port Blocker does not affect access to web based email such as Hotmail or Yahoo Mail Control of web based email is accomplished through Sensiti...

Page 28: ...mmon Ports This allows programs that are wanted to be let through and programs that are not wanted to be blocked Older generation routers are not aware of this technology and may not operate properly with Port Blocker If certain applications such as email or FTP do not work as expected after configuring port blocker then there may be a router compatibility issue If such an issue is determined ther...

Page 29: ...d the level is changed and NetPurifier is restarted Each level and its filtering capabilities are described below in the Filter Matrix Figure 3 16 Changing Sensitivity Levels Note Upon changing a level NetPurifier will restart with the new level A restart may take up to one minute to complete During this time user access to the Internet will be denied ...

Page 30: ...200 Banned Sites Filter B banned Description Level 1 Level 2 Level 3 Level 4 Banned Sites ads B B B aggressive B B B audio video B B B drugs B B B gambling B B B hacking B B B mail B B porn B B B B proxy B B B violence B B B warez B B B PICS Filter B banned Description Level 1 Level 2 Level 3 Level 4 PICS Ratings On On On Off ...

Page 31: ...settings B lnk Windows Shortcut B mda Microsoft Access add in program B mdb Microsoft Access program B mde Microsoft Access MDE database B mdt Microsoft Access workgroup information B mdw Microsoft Access workgroup information B mdz Microsoft Access wizard program B mdz Microsoft Access wizard program B msc Microsoft Common Console document B msi Microsoft Windows Installer package B msp Microsoft...

Page 32: ...ndows system file B url Internet shortcut B vb Internet shortcut B vbe VBScript Encoded script file B vbs VBScript file B vxd Windows system file B wsc Windows Script Component B wsf Windows Script file B wsh Windows Script Host Settings file B otf Font file can be used to instant reboot 2k and xp B ops Office XP settings B doc Word document B xls Excel document B gz Gziped file B tar Tape ARchive...

Page 33: ...ed file B sea Mac compressed file self extracting B bin Mac binary compressed file B hqx Mac binhex encoded file B rar Similar to zip B mp3 Music file B B B mpeg Movie file B avi Movie file B asf this can also exploit a security hole allowing virus infection B iso CD ISO image B ogg Music file B wmf Movie file B bin ISO image B cue CD ISO image B ...

Page 34: ...Site List Place sites that you wish to except from NetPurifier filtering in the Exception Site List Figure 3 17 Adding to the Exception Site List Note When entering sites in the list you do not need to preface with www A sign will cause the entry to be ignored When completed click on Save ...

Page 35: ...computers that you do not want filtered by NetPurifier in this list This may include administrator workstations and servers Figure 3 18 Adding to the Exception IP List Note When entering sites in the list use the standard IP i e 192 168 1 1 A sign will cause the entry to be ignored When completed click on Save ...

Page 36: ...age shows what site was not allowed the reason why and a message that may be configured to meet your requirements Enter the message that you would like to appear on the Access Denied page When completed click on Save Note Upon changing the Access Denied message NetPurifier will restart with the new message available A restart may take up to one minute to complete During this time user access to th...

Page 37: ...te List To add a site enter the name of the site It is not necessary to use the www prefix Figure 3 20 Banned Site List When completed click on Save Note Upon changing the Banned Site List NetPurifier will restart A restart may take up to one minute to complete During this time user access to the Internet will be denied ...

Page 38: ... ...

Page 39: ...filter between the requesting computer and the Internet The diagram below shows how a request is routed through NetPurifier Internet Router Firewall 1 2 3 4 5 6 10 100baseT Ethernet Server User NetPurifier Figure 4 1 NetPurifier Operation ...

Page 40: ...te content 1 NetPurifier first checks the requested URL against its Exception IP List to see if the site is excepted 2 Next NetPurifier checks the URL against it Exception Site list to see if it is excepted 3 Next NetPurifier checks the URL against its blacklist This list has over 500 000 entries and is categorized by content 4 NetPurifier then loads the complete page into memory and scans it for ...

Page 41: ...ts blacklists NetPurifier will update its blacklists either daily or weekly depending on the service contract you have acquired The daily update is performed between 2 00 and 4 00 AM local time The weekly update is performed Sunday mornings between 2 00 and 4 00 AM local time The update is automatic and requires no user intervention Note Upon a Blacklist update NetPurifier will restart with the ne...

Page 42: ...r threshold described in Chapter 3 If the threshold is exceeded the page is denied If the threshold is not exceeded the page is displayed An example of this in action is a search engine search for nude breasts The page will be denied as it brings up multiple pornographic sites and the threshold is exceeded A search on the phrase breast cancer is not blocked The good words found on the page modify ...

Page 43: ... ...

Page 44: ... ...

Page 45: ...tp www netpurifier com If you re reading this document as a PDF file and are currently on line please click the URL above and you ll be transported to our website On our website you will find the latest information about our leading edge solutions product announcements along with a form you can use for general information requests Sales Our friendly and knowledgeable sales staff is available to an...

Page 46: ...hnical Support NetPurifier provides technical phone support at 866 875 1254 Email support is available at support netpurifier com You can also fax your questions to us at our 24 hour fax number 408 265 5249 ...

Page 47: ...s less than 20ms DHCP Requirements NetPurifier is configured with an active DHCP server The scope is 192 168 1 10 to 192 168 1 249 192 168 1 1 is reserved for the Internet Gateway 192 168 1 9 is reserved for NetPurifier 192 168 1 250 253 is reserved for wireless devices that may be present on a network The DHCP server is easily disabled if an existing DHCP server is used In this case the existing ...

Page 48: ...aneous and depending on network usage patterns may result in a substantial reduction in Internet network traffic Blacklist Update The Blacklist is updated automatically between 2 00 and 4 00 AM daily local time or between 2 00 and 4 00 AM Mondays depending on the Service Contract The update takes approximately 2 minutes over a typical 1 5mbps line Mechanical Environmental Dimensions HxWxD 11 5 x 5...

Page 49: ......