Filter Configuration
Configure various advanced components of the DrawBridge, including technical settings for the Redwood filter engine.
ACLs and Auth
Advanced ACL, Authentication, and Page Content Modification settings
Advanced ACLs
Advanced ACLs act on the network request (not the response).
A list view is shown by default. Click the name of an ACL to view the individual ACL record.
ACL Record View
An ACL record contains the following parameters:
| Parameter | Setting | About |
|---|---|---|
| Level | Foundation, Standard, Override |
Defines the priority ruleset group of this rule |
| Status | Active or Inactive |
This record is available/functional |
| Synchronized | Yes or No |
This record is globally-available (Yes) or local-only (No). |
List views are shown for associated:
- Advanced ACL Patterns -- what triggers this ACL; rules to match traffic. Add a pattern with the
Addbutton at the top of the list. - Advanced ACL Actions -- what this ACL will do to matching traffic. Add an action with the
Addbutton at the top of the list.
- Add an Advanced ACL record with the blue + Create ACL button
- Edit an Advanced ACL record with the green pencil Update ACL button
- "Waterdrop" menu button:
- New ACL Pattern: Add a new ACL Pattern to this record
- New ACL Action: Add a new ACL Action to this record
- Bookmark this page with the ribbon Bookmark button
- Sync Menu (chain-link icon)
- Sync Mode (default is
2 Way - Push / Pull from Server); click record sync information - Push to Sync Publisher: initiate a record update push from this DrawBridge to the Sync Server
- Pull from Sync Publisher: initiate a record update pull to this DrawBridge from the Sync Server
- Mark to Resync: flag this record in the background to be included in the next sync run
- Sync Mode (default is
Note that records wich are built-in/included with the DrawBridge cannot be edited or deleted, therefore those buttons are not available for those record types.
Also note that only relevant Sync Menu items are displayed, which means fewer options may be visible than mentioned here.
Page Pruners
Custom page pruning rules enable the selective removal of certain elements on a webpage. This is an advanced feature; it is assumed that you are familar with CSS (Cascading Style Sheets).
A list view is shown by default. Add a new Page Pruner rule with the blue + Create Page Pruners button in the upper right of the list view.
Record View A Page Pruner record contains the following:
| Parameter | About |
|---|---|
| Status | Active or Inactive |
| Canonical ID | The globally-unique identifier for this record |
Page Pruner Selectors ruleset list:
Add a rule to this Page Pruners record with the Add button at the top of the record ruleset list view.
Page Pruner Record header buttons:
- Create a new Page Pruner record with the blue + Create Page Pruner
- Edit this Page Pruner record with the green pencil Update Page Pruner button
- Delete this Page Pruner record with the red trashcan Delete Page Pruner button
- Add a Pruner CSS Selector rule to this record with the blue scissors Add Pruner CSS Selector button
- Bookmark this page with the ribbon Bookmark button
- Sync Menu (chain-link icon)
- Create on Sync Publisher
- Sync Mode (default is
2 Way - Push / Pull from Server); click record sync information - Push to Sync Publisher: initiate a record update push from this DrawBridge to the Sync Server
- Pull from Sync Publisher: initiate a record update pull to this DrawBridge from the Sync Server
- Mark to Resync: flag this record in the background to be included in the next sync run
Note that only relevant Sync Menu items are displayed, which means fewer options may be visible than mentioned here.
Proxy PAC rules
A few important notes:
- PAC stands for Proxy Auto Config
- Proxy PAC rules apply to only Remote Devices
- Rules instruct the recipient operating system to bypass specific traffic from the DrawBridge proxy: in other words, don't redirect X traffic to the DrawBridge to be filtered.
- Rules specified here are included in the response to All valid Proxy PAC requests made to this DrawBridge; i.e. there is no tenancy for these records -- they are system-wide.
PAC bypass rules do not have individual record pages.
However, each entry has the following parameters:
| Parameter | Options | About |
|---|---|---|
| Function | dnsDomainIs or isInNet or shExpMatch |
Designate type of pattern: domain name, IP address, or regular expression |
| Scope | Host or URL |
Set whether the pattern is to match only on the domain name or a full URL string |
| Pattern | <user-entered-data> |
The actual data you want to match. For example, if you selected dnsDomainIs and Host, then you might enter example.com |
| Subnet | <user-entered-data> |
Subnet for address entered in Pattern when isInNet is selected (not used for other Functions) |
- Edit a rule with the green pencil Update Record button on the relevant line
- Delete a rule with the red trashcan Delete Record button on the relevant line
- View the changelog with the blue Record Activity Stream button on the relevant line
Redwood Config
Advanced Redwood configuration file directives
Filter Parameters
Filter parameters are advanced, low-level configuration settings for the DrawBridge Redwood content classification engine. These settings are generally managed by Compass and should not be changed unless directed by Compass Foundation support staff.
Directives
Directives are additional advanced, low-level configuration settings for the DrawBridge Redwood content classification engine. These settings are generally managed by Compass and should not be changed unless directed by Compass Foundation support staff.
Safe Search
Safe Search is the enforcement of the Adult Content Blocking made available by various platforms, including YouTube, Bing, and Google.
It is recommended that this generally stay enabled for the cleanest browsing experience. However, with SafeSearch enabled, YouTube livestreams will not be available. It is nessesary to set the YouTube SafeSearch settings to Disabled to view livestreams on that platform. The burden for responsible use lies with the user in such cases.
Safe Search settings are managed at a Company level via the Preferences application. See Essential Concepts: Preferences for further information.