Re: [squid-users] squid on windows domain users

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Fri, 24 Apr 2009 18:04:44 +1200

Vicks wrote:
> dear friends,
>
> i m from india & is using a 2 Mbps Leased Line connection, distributing it through windows 2003 server with squid & ip based filtering.
> frequently i suffer from problems like ip conflicts bcoz users who dnt hav internet facility track the ip on which internet is available & changes them.
>
> what is the remedy to this.
> is there a solution like this.
> for all computers that need to hav internet facility, should be in domain of the system on which squid is installed & only these will have internet facility & no other computer on LAN can access internet, dsnt matter what its IP is.
>
> whts ur opinions frnds?
>

Use some form of authentication. Squid is capable of ActiveDirectory auth.
  http://wiki.squid-cache.org/ConfigExamples

What you have described so far is a basic network security failure
usually seen on Windows NetBIOS networks (users being able to detect
other users IPs and perform privilege escalation).

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE14
   Current Beta Squid 3.1.0.7
Received on Fri Apr 24 2009 - 06:04:41 MDT

This archive was generated by hypermail 2.2.0 : Fri Apr 24 2009 - 12:00:03 MDT