-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathdansguardianPSA.xml
130 lines (129 loc) · 5.44 KB
/
dansguardianPSA.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
<?xml version="1.0" encoding="UTF-8"?>
<!-- PSA Manifest instance - version 1.1 - 3 Sep 2014 -->
<PSAManifest xmlns="https://www.secured-fp7.eu/ref/PSA_manifest/"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="https://www.secured-fp7.eu/ref/PSA_manifest/ file:PSA_manifest_v1.1.xsd">
<general_info>
<PSA_ID>dansguardian</PSA_ID>
<name>Dansguardian PSA</name>
<description>The Dansguardian PSA pretends to offer the possibility to block all the traffic the user wants to block. The most clear example is the father who wants to manage the content his child can access to.
The PSA acts like a transparent proxy managed by both Dansguardian and Squid. Dansguardian offers multiple already public blacklists which can block many types of content while Squid is in charge to forbid the traffic to that kind of urls.</description>
<web_site>https://www.secured-fp7.eu/</web_site>
<version>1.00</version>
<vendor>UPC</vendor>
<author>Alicia Vila</author>
<EULA></EULA>
<licence>GPLv2</licence>
</general_info>
<functionality>
<capability>
<access_control>
<traffic_filter>
<application_filter>
<name>Web HTTP/S transparent proxy</name>
<implementedBy>dansguardian-squid</implementedBy>
<type>transparent proxy</type>
</application_filter>
</traffic_filter>
</access_control>
<HSPL_capability>
<capability_list>Advanced_parental_control</capability_list>
<capability_list>TrafficInspection_L7</capability_list>
</HSPL_capability>
</capability>
<M2L_translation_info>
<security_control>
<id>dansguardian</id>
<name>HTTP/S transparent proxy</name>
<description>This plugin converts MSPL to dansguardian configuration</description>
<plugin>
<id>dansguardian_M2L_plugin</id>
<name>Dansguardian M2LPlugin</name>
<URL>http://195.235.93.146:8080/v1/PSA/M2Lplugins/PSA-dansguardian</URL>
<command>none</command>
</plugin>
<configuration_file>dansguardian_M2L_plugin.jar</configuration_file>
</security_control>
</M2L_translation_info>
<performance>
<network_throughput unit="Mbit/s">
<value>10</value>
</network_throughput>
<simultaneous_connections unit="conn/s">
<value>10</value>
</simultaneous_connections>
<max_numer_of_operations_rules>2</max_numer_of_operations_rules>
<max_numer_of_users>10</max_numer_of_users>
</performance>
</functionality>
<execution_model>
<infrastructure>
<hw_requirement>
<cpu_unit>1</cpu_unit>
<cpu_architecture>x86_64</cpu_architecture>
<cpu_family>Intel</cpu_family>
<RAM_size unit="GB">
<value>1</value>
</RAM_size>
<disk_size unit="GB">
<value>2</value>
</disk_size>
<bandwidth unit="Mbit/s">
<value>10</value>
</bandwidth>
<max_delay unit="ms">
<value>2000</value>
</max_delay>
</hw_requirement>
<sw_requirement>
<OS_type>Debian</OS_type>
<OS_version>7.0</OS_version>
<OS_architecture>x86_64</OS_architecture>
</sw_requirement>
</infrastructure>
<security_availability/>
<mobility>
<migration_support>cold migration</migration_support>
<type>stateless</type>
</mobility>
<PSC_dependency/>
<additional_requirement/>
</execution_model>
<configuration>
<PSA_format>img</PSA_format>
<security_control_configuration>
<security_control_ID>dansguardian_M2L_plugin</security_control_ID>
<configuration_file>dansguardian_M2L_plugin.jar</configuration_file>
<executable>java</executable>
</security_control_configuration>
< <network_card_no>1</network_card_no>
<network_card_configuration>
<card_ID>eth0</card_ID>
<MAC_address>00:00:00:00:00:00</MAC_address>
<IP_address>1.1.1.1</IP_address>
<netmask>255.255.255.0</netmask>
</network_card_configuration>
<network_card_configuration>
<card_ID>eth1</card_ID>
<MAC_address>00:00:00:00:00:01</MAC_address>
<IP_address>192.168.1.1</IP_address>
<netmask>255.255.255.0</netmask>
</network_card_configuration>
<network_configuration>
<gateway_IP_address>1.1.1.250</gateway_IP_address>
<DNS_IP_address>8.8.8.8</DNS_IP_address>
</network_configuration>
<kernel_configuration/>
</configuration>
<monitoring>
<input_bandwidth unit="Kbit/s">
<value>100</value>
</input_bandwidth>
<output_bandwidth unit="Kbit/s">
<value>10</value>
</output_bandwidth>
<delay unit="ms">
<value>10</value>
</delay>
</monitoring>
</PSAManifest>