Cprofiles

cProfiles

cProfiles allows you to ADD/Remove Profiles, depending upon the potential nature of the content served, by the web-site. cProfiles queries SafeSquid's Content Categorization Service (CCS), to determine if a web-site belongs to one or more categories. The determination is actually a
score of probability: for example:

  • a score of 1 ==> the site definitely does not belong to the queried category,
  • a score of 100 ==> the site most definitely belongs to this category.

Now based on the determination, you can ADD / Remove Profiles, and thus take necessary actions, via the various filters like URL Filter, Mime-Filter, etc. cProfiles stores the results, in a high-speed memory based (volatile) cache, to ensure quick response for often accessed websites.

Content Categorization Service

CCS maintains a categorized database of web-sites. The categorization has been done on the basis of availability of content of certain category, at the web-site. cProfiles uses the standard DNS protocol to communicate with CCS, thus the query results will be stored (non-volatile) in all the en-route caching nameservers. Thus query results should be quickly accessible to you even across restarts.

Screen-Shot

Web Filter Proxy Interface Screen-shot - cProfiles

Main Section

Enabled
This option allows you to enable, or completely disable cProfiles Section, irrespective of the rules defined in the section

Yes - Enable cProfiles Section
No - Disable cProfiles Section
Hints Path
cProfiles cache location

Entries for processing cProfiles

Enabled
This option allows you to enable or disable a specific entry

Yes - Enable entry
No - Disable entry
Comment
A comment for future reference explaining what this entry does
Profile Tracing
Enable recording this entry in safesquid.log
LDAP Profiles
Comma Separated list of LDAP Profiles to which this entry shall be applicable. This entry will match if any of the LDAP Profiles specified here, match.
Profiles
A comma separated list of Profiles on which this rule should apply. The rule applies to every one if this field is left blank.
Category List
The categories from the list on which this entry shall be applicable.
Score Range
Specify the score range for a positive match. cProfiles will query the SafeSquid's Content Categorisation Service (CCS) to determine, the probability of content nature to belong to the above mentioned categories. The probability could be between 1 and 100.

a score of 1 = the site definitely does not belong to the queried category
a score of 100 = the site most definitely belongs to this category.

So, if you set the score range to 2-100, then entries created below for Added Profiles or Removed Profiles, will be applied only if the scored value is more than 1.
Added profiles
Comma separated list of profiles that will be Added to the connection, if the selected categories have a positive match. These profiles can then be used in various filters like URL Filter, Mime-Filter, etc. to take desired action.
Removed profiles
A comma separated list of profiles to remove when the selected categories have a positive match. If any of these profiles have been already applied to the connection by any other Profile rules, they will be removed.

Example

Suppose you wanted to globally block 'porn' category, and restrict 'Accounts' profiles from accessing 'jobs' category.

Create the following rules in the cProfiles section:

Web Filter Proxy Interface Screen-shot - cProfiles

The first rule applies 'blocked-category' profile to all the requests, for which there is a positive match, under the 'porn' category. This rule applies to every body, since the 'Profiles' field is blank.

The second rule applies 'blocked-category' profile to all the requests, for which there is a positive match, under the 'jobs' category. This rule applies only to 'Accounts' profile.

Next, go to the URL filter section and add the following rule under Deny subsection (Presuming that the section is enabled and Policy is Allow).

Web Filter Proxy Interface Screen-shot - cProfiles

This rule blocks all requests with blocked-category profile, effectively, blocking access to 'porn' category to everyone, and 'jobs' category to 'Accounts' users.

Unless otherwise stated, the content of this page is licensed under Creative Commons Attribution-ShareAlike 3.0 License