Matthew Kaminski wrote:
> Hey everybody, i'll make this as short as possible.
>
> Background: I run Squid 2.4 Stable6 or a RedHar 7.3 (P200 with 196 mb ram
> and 4 GB cache size) box in public college with about 2600 students. As well
> I run novell 5.1 network and i got squid to authenticate to NDS. It all
> works great except 2 moderate issues.
>
> Problem 1: Users are able to change the proxy settings of the browser, which
> is very bad, as that way they can basically bypass the proxy. I was thinking
> that I could disable assess on port 80 from all hosts on my lan, excpet
> squid machine. that will cause that the ONLY way to access the new was
> through the squid machine. Can someone comment on that ??? is that the right
> way to do it ??? I'm worried there may be some unwanted side effects... is
> that the case ???
>
use transparent proxy feature of squid. with or without proxy settings,
they will pass through squid everytime they surf.
hth,
jun
Received on Thu Nov 21 2002 - 10:25:13 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:11:29 MST