One could also use the firewall/nat box to not masquerade the range of IPs that the students machines use...
Ie, deny everything then allow the squid box to access port 80, 81, 443, etc out on the internet side. > ---------- > From: Robin Lynn Frank[SMTP:[EMAIL PROTECTED]] > Sent: Wednesday, March 20, 2002 10:24 AM > To: St John Tech Support; Squidguard > Subject: Re: Forcing Users to us Proxy > > On Tuesday 19 March 2002 12:33 pm, St John Tech Support wrote: > > Hi, here is what I have, I have a internel network 192.168.1.* I have > about > > 16 students that need to by collage policey use the Squid / SquidGard > > Server to access the internet, My proxy server also acting as a NAT box > > between the internet and local network any suggestions would be great > > > > Thanks > > Brent > > Brent, > > You didn't mention what the clients were running, but... If they are on > the > college's Windows NT or 2000 or XP, you can simply deny access to > configure > the browsers to your "public" users. If they are on UNIX, Linux, or > FreeBSD, > you can change the permissions on the configuration files that only > administrative accounts have write access. That way the students can not > change the proxy settings in their browsers. If they connect from their > own > computers....duh! It will take someone more saavy than me to answer that > one. > -- > > > Paradigm-Omega, LLC �2002. All rights reserved. > No HTML content or attachments are accepted. > Our mail servers reject all UCE (spam). > GPG fingerprint and keyserver information in headers. > www.paradigm-omega.com * www.paradigm-omega.net > Current Linux kernel 2.4.8-26mdk uptime: 0 hours 51 minutes. >
