You should also block all other access to your squid port except from localhost. That way your dansguardian cannot be bypassed.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jun Salen Sent: Monday, June 18, 2007 1:36 PM To: [email protected] Subject: Re: [plug] Block access by DansGuardian Aha! Thank you Sir Kenneth, Now I know where the problem is, I got the idea from your flow chart, it is needed for the client to connect first to DansGuardian before the Squid, so I change the browser port from 8888 to 8080 and it works. Thanks again Sir. ------------------------ Date: Fri, 15 Jun 2007 16:49:07 +0800 From: "Kenneth P. Oncinian" <[EMAIL PROTECTED]> Subject: Re: [plug] Block access by DansGuardian To: "Philippine Linux Users' Group (PLUG) Technical Discussion List" <[email protected]> Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain Hi, If your setup is like this: client -> dg -> squid -> internet cehck if dg listening port is 8080 and make sure that your client's browser is configured to use port 8080. You can't use port 80 because you may have apache running on your dg box. also check dg logs and squid logs and tell us if there are any indication that dg is _not_ doing any content filtering or chances are, you are just bypassing dg and connecting to the internet using your squid. and show us some dg logs please :-) hth, Kenneth On Fri, 2007-06-15 at 08:23 +0100, Jun Salen wrote: > Hi Sir's, > > I am currently using squid.conf file to block our user > from accessing specific web sites and also give access > to few clients by allowing ip address, both are stored > in a file for easy manipulation. My problem is that I > found it tedious to add web site to block from time to > time so I try used DansGuardian. My problem is that > even after the installation, configuration and > starting the service, it has no effect on our client > browser. I as a test user can still access the blocked > sites. Our user are required to use proxy in order to > browse and the port for our proxy is 8888. My > dansguardian.conf contains the ff.: > > filterport = 8080 > proxyip = 127.0.0.1 > proxyport = 8888 > > When I try to change filterport to 80, there is an > error saying that the port was already been used. I > also tried SquidGuard before but also have problem > configuring it so I decide to use Dans. Can you help > me with this please. > > Thanks, > > junji > aisalen.webpress.com > Linux Registered User #253162 junji aisalen.webpress.com Linux Registered User #253162 Send instant messages to your online friends http://uk.messenger.yahoo.com _________________________________________________ Philippine Linux Users' Group (PLUG) Mailing List [email protected] (#PLUG @ irc.free.net.ph) Read the Guidelines: http://linux.org.ph/lists Searchable Archives: http://archives.free.net.ph _________________________________________________ Philippine Linux Users' Group (PLUG) Mailing List [email protected] (#PLUG @ irc.free.net.ph) Read the Guidelines: http://linux.org.ph/lists Searchable Archives: http://archives.free.net.ph
