Re: [squid-users] Blocking site

I thought you were using WCCP?

With any form of transparent redirection, it is usually a simple matter
to bypass the proxy for one destination IP. Just create a access list
(or ipchains rule, or whatever is doing the redirection) that catches
that site before the redirect, and skips the redirection.

Then this problem won't exist for any users for this site.

Awie wrote:
> Joe & Simon,
>
> I told the user to use "real" IP that not be proxied. Coz, I should keep the
> other 200 users use Squid normally instead 1 "abnormal" user.
>
> However, I will try my best to look for the way out.
>
> Thx & rgds,
>
> Awie
> ----- Original Message -----
> From: "Simon White" <simon@mtds.com>
> To: <squid-users@squid-cache.org>
> Sent: Friday, March 29, 2002 2:57 AM
> Subject: Re: [squid-users] Blocking site
>
>
>
>>28-Mar-02 at 10:35, Joe Cooper (joe@swelltech.com) wrote :
>>
>>>Apparently the library site maintainer imagines that IP-based
>>>authentication provide some level of security. It doesn't and they're
>>>foolish for thinking it does, but you might have a hard time convincing
>>>them to fix it. Just bypass the proxy for that site (the one on port
>>>
> 80).
>
>>The great fun part is that the library site a local school is subscribed
>>to is subscribed with their proxy's IP, with IP based security. So the
>>whole school can now get at the library resource, rather than just from
>>one workstation in the library. IP security is a bonus for them :)
>>
>>--
>>[Simon White. vim/mutt. simon@mtds.com. GIMPS:58.87% see www.mersenne.org]
>>Note to experienced users: Please don't encourage anti-support behavior.
>>Don't try to answer questions from users who don't provide the necessary
>>information. Guessing what they did is an incredible waste of time. (DJB)
>>[Arbitrary quotes signature rotation, a simple bash script by Simon White]
>>
>
>
>

-- 
Joe Cooper <joe@swelltech.com>
http://www.swelltech.com
Web Caching Appliances and Support