On Wed, 24 Mar 2004, James Gray wrote:
> > I know I'm asking a lot - Surf Control is a nice piece of software, except
> > for the fact that it doesn;t bloody work properly! I want the features,
> > I'd just like to do something similar on an open source platform.
>
> You could use Squid (http://www1.au.squid-cache.org/) but it's a
> regular web proxy not a "search and destroy" agent. Still, if you block
> ports 80/443 outgoing at the perimeter unless they originate from the
> proxy you have an effective means of FORCING everyone to use the proxy.
> This is what we do and it works well.
That's what we do, except we us ISA.
> Also, we use Squid's "delay pools" which throttle certain types of
> content over a certain size etc. For example, if a user wants a
> Shockwave Flash file that's 2MB, they get the first 100KB at full speed,
> then it trickles through at 15kbps (<1/2 dial-up speed - heheh).
> Discourages users from saturating our 4Mbps connection downloading game
> demos and porn.
>
> Another bonus is it authenticates back to our Win2K Active Directory so
> we can link users<->url. So when they do something that contravenes our
> acceptable use policy, we have the records to make their lives hell (or
> just extort $$$ from them).
Squid plugs into AD??? Now *that* is what I'm walkin' about! If I can
integrate Squid into AD and then use Squidguard {as suggested by
others}...
Got any hints on where to go to find docs for getting Squid to talk to AD?
> I know it's not what you asked for specifically, but it's a VERY
> powerful piece of software.
I don't care what software I use, as long as it does what I want it to do.
Although, if Squid talks to AD, I'm damn well going to look into it!
DaZZa
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html