Well, transparent proxies are not allowed by the HTTP standard. Squid can
be asked to work in a transparent mode, and does (for the most part) work.
But there are occasional hiccups. Henrik Nordstrom (the squid developer
most active on the list) is constantly telling people that using squid in
transparent mode should only be done as a last resort.
Squid is, however compatible with Cisco's WCCP (version 1, IIRC).
With that said, Squid's ACLs are simply amazing. I don't know if there is
anything (allowed by HTTP) they can't do. Time base, IP based, domain
based, authentication base etc, it's all there. And if you find something
that it can't do, it has a directive to use external acls, with very ACLs
caching. It's quite flexible.
As for filtering, I've heard (and read) good things about DansGuardian.
Never used it myself, but there it is all the same.
I also imagine there are downloadable files that you can use with squid for
filtering. Others on the list might know more about this than I.
Chris
-----Original Message-----
From: Jon Newman [mailto:jnewman@oplink.net]
Sent: Tuesday, January 11, 2005 12:36 PM
To: Chris Robertson
Subject: RE: [squid-users] filtering/proxy options?
I wasn't sure it was something squid could do, thanks for the heads up.
The R3000 doesn't have CLI access, which is something I would at minimum
need...since I will be building a control interface to manage this. I know
this is staying off topic as far as this list is concerned, but is there
any other solution out there (possibly software only, as I would like to
use my own hardware?). Thanks again...
Jon
> Completely not Squid related, but the 8e6 technologies R3000 does this
> exactly (and fairly well).
>
> I'm not affiliated with 8e6 in any way. My company just uses a fail over
> pair for this very purpose.
>
> Chris
>
> -----Original Message-----
> From: Jon Newman [mailto:jnewman@oplink.net]
> Sent: Tuesday, January 11, 2005 12:05 PM
> To: squid-users@squid-cache.org
> Subject: [squid-users] filtering/proxy options?
>
>
> I am looking at implementing a proxy/filtering server and would like some
> recommendations on the direction to take. I wish to do the filtering on an
> IP basis with a transparent proxy. IE: specify what IPs are to have
> filtering enabled and what options for that IP are enabled/etc. Can squid
> do this? Could anyone point me in the right direction in order to get
> something like this implemented? I am a developer and fully understand and
> am well accustomed with RTFM'ing....but would like some direction. Can
> anyone point me the right way? Basically I would just like to know what
> packages/software would be needed to accomplish this...the routing/etc I
> can already take care of.
>
> Thanks in advance....
>
> Sincerely,
> Jon Newman
>
Received on Tue Jan 11 2005 - 14:54:31 MST
This archive was generated by hypermail pre-2.1.9 : Mon Mar 07 2005 - 12:59:35 MST