On Sat, Jun 11, 2016 at 10:02:16AM +0200, Petter Reinholdtsen wrote: > [Giorgio Pioda] > > Hi, > > > > on Jessie server/ws-client setup, > > > > for some obscure reasons activating the netblock > > and simultaneoulsy switching of squid3 still allows > > the pupils to use iceweasel for outgoing traffic. > > > > Instead of this, chromium get blocked correctly. > > > > I had to quick uninstall iceweasel/firefox-esr > > just before practical examinations. > > I suspect this is because Iceweasel/Firefix uses the proxy by default, > while Chromium do not. A better fix might be to block squid3 for the > usres/clients in question when doing exams. Otherwise they might > reconfigure Chromium to use squid and get out that way. > > Also, when Jessie yesterday switched to Firefox from Iceweasel, our > Iceweasel setup is ignored. It is these files: > > /etc/iceweasel/profile/cert_override.txt > /etc/iceweasel/pref/debian-edu-homepage-ldap.js > > I believe they must be moved to take effect. > > --
Changing the /usr/sbin/debian-edu-update-netblock accordingly to 10.164.88.0/23 fixes and iceweasel gets effectively blocked. Regards P.S: I wrote a typo, squid3 is off, disabled. Sorry. -- Giorgio Pioda - Sysadmin SPSE-Tenero Cell +41 79 629 20 63 Tel +41 58 468 62 48
