On your firewall's packet filter block everyone's outgoing access to
port 80 except for the squid proxy server. There is a huge list of
issues here (anonymous surfing services, ssl, non-standard http ports
and external proxies etc etc etc) but the heart of the matter is deny
everyone access to everything they could use to surf the net without
squid, and they'll use squid.
> -----Original Message-----
> From: Scott Mayo [mailto:sgmayo@mail.bloomfield.k12.mo.us]
> Sent: Thursday, August 01, 2002 9:19 AM
> To: squid-users@squid-cache.org
> Subject: [squid-users] authenticate and firewall
>
>
> I am using squid/squidguard for filtering. I am also
> authenticating with smb_auth. My addresses are all private.
> What I want is to make sure that everything goes through
> squid. I have added the proxy to my browser settings, but I
> do not want to have to hide the properties for the browser. I
> want it so that if someone removes the proxy settings from
> the browser then they will not get to the internet. Is there
> someway to do this while still using authentification? Any
> help would be greatly appreciated. Thanks, Scott Mayo
>
>
Received on Thu Aug 01 2002 - 12:38:03 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:09:30 MST