Hi Tom,
>> Then I found that one could bypass the proxy by just tell the browser to 
>> connect directly.
>>     
>
> What does that mean? Give us an example of what you did, what you
> expected to happen and what actually happened.
>
>   
If I go via the proxy to a non-existing page like for eg www.noheret.com 
I get an announcement from squid that the page cannot be found.  If I 
switch off the use of proxy, ie connect directly to the same site I get 
a message probably from the browser that the site does not exist.  So I 
deducted that if you switch off the use of the proxy you can apparently 
bypass all of it, even the redirection.


The idea is all http trafific should go to port 3128 (Dansguardian - 
content filtering) and then to squid(8080) for cache proxying.

With the redirect I hoped that one should no be able to bypass it at all.
> Again, please tell us exactly what problem you are trying to solve.
>
>   

>> 2. QUEUE/Authentication/Accounting.
>>
>> In the documentation I read that some people use it to control p2p. 
>>
>> Would it possible to or has anybody tried it for anything else?  I have 
>> the idea to try to use it to authenticate users.
>>     
>
> Most people do that by redirecting all attempts to connect to the web to
> a login server. Successful login causes the ruleset to be altered to
> remove the redirection (or preempt it with a different redirection).
>
>   

Any examples to look at?

Kind regards,

Louis.


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to