On content filtering in schools. Problems

Good day, dear sokhabrovtsy!
I work as a system administrator in one of the colleges of Russia. Recently, as many already know, educational institutions have obliged to limit Internet content to their students. In my opinion, this business is, of course, necessary, but the implementation ...
Under the cut there will be a short description from the “as I understood it” series, some personal experience in communicating with the prosecutor’s office and questions to the community.


')

As i understand it

To fulfill the requirements for restricting access to Internet resources containing information incompatible with the tasks of education and upbringing (Article 14 124-, Article 10 149-), it is necessary to limit access to Internet resources, where there is pornography, »Suicide and ways to implement it, profanity, methods of making explosives, drugs (and their advertising), terrorism, extremism and all that jazz.

How to propose to limit

There is a registry of banned sites of ROSKOMNADZOR and a list of extremist materials of the Justice Ministry , which it is proposed to use when restricting content.

Problems

It is impossible to get a complete list of resources of the unified registry of ROSCOMNADZOR (not counting not always up-to-date and incomprehensible to what extent a legal resource ). You can only check a specific site for "unsuitability" by typing it into the query string of the registry site. Since filtering in my educational institution is carried out using the squid + dansguardian bundle, then:
- I cannot add all sites to the blacklist, because this list cannot be obtained
- I also cannot fully use the list of prohibited phrases for filtering, since there is no officially approved list
- In addition, by https my filter also does not know how to work, so I have to ban some resources (social networks, for example) over ip, using IPFW

As a result, at the moment we are using “white” lists + ban https-resources over ip, but this is, firstly, very inconvenient for students (I dreamed that teachers would provide me with lists of sites that they need for work, and I I will accumulate a base of white lists ... but this, of course, did not happen), and, secondly, it is probably not legal ...

After writing the article, I found a way to block https-urls with "hands on the battered" (recall that dansguardian did not block them). It is necessary to specify a proxy server in users' browsers (even if it is transparent) and port 8080 . I did this with a GPO.

Prosecutor's check

It was she who forced me to write this post. Since there was a place to be, and there was a place to be an order to eliminate the revealed violations (an attempt to eliminate violations and is filtering on the white lists).
It looked like this: A girl came in form, visited the library. On the library computers I looked at the browser history, followed the link from the history on the anonymizer on VKontakte, then typed “suicide” in the search - I received a couple of links, then I found something to make bombs and that's it. After that, there was a nice conversation with my boss that “you have the work, we see it is underway ... you just need to finish this and that ... etc.”. Then a prescription was written out, where the director and the secondary vocational institution "were not praised". After some time, a meeting was convened with the director with the participation of this representative of the prosecutor's office. At the meeting, I asked all the above listed questions about lists and phrases to which I, of course, did not receive an answer. General phrases like “well, you track,” “you contribute,” “check the history once a week,” and all ...

Questions to the community

Since I fully admit that I may not know about any solutions that are already working, or misunderstand the essence of the requirements, or not know / know something else, then I ask for help. How not to violate the law, to satisfy the "freedom of access to information" of students, it is desirable to solve all the forces of open source and without blood? :)