Yes, you can put some rules in iptables to redirect incoming packet to 
port 80 similar to:
iptables -t nat -A PREROUTING  -i eth1 -p tcp --dport 80 -j DNAT --to 
192.168.1.254:8080

in this case traffic is INTERCEPTED and redirected to the squid proxy 
but in this case you cannot use authentication to AD.

It is better to set a Group policy in AD to set up client with right 
proxy settings otherwise use the WPAD protocol and leave client proxy 
configuration to determine automatically proxy settings.


Guilherme Rocha ha scritto:
> Hello Davide and Christopher,
> 
> 
> 
> thanks for your answer. I understand you two.
> 
> My question isn't just block the navigation without set the proxy in
> browser settings.
> 
> I would like to use AD authentication without to set the proxy in browser,
> asking anybody for authentication.
> 
> Set the proxy in browsers will difficult to administrate notebook's users, 
> that
> are frequently traveling and using other networks.
> 
> 
> Is it possible with Endian FW ?
> 
> 
> All the rest of endian implementation is working fine.
> 
> 
> hugs
> 
> 


------------------------------------------------------------------------------
Enter the BlackBerry Developer Challenge  
This is your chance to win up to $100,000 in prizes! For a limited time, 
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize  
details at: http://p.sf.net/sfu/Challenge
_______________________________________________
Efw-user mailing list
Efw-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/efw-user

Reply via email to