Next LUG meet: 9 Nov 2003 around 4 pm - VJTI
--------------------------------------------
On Thu, Nov 06, 2003 at 04:35:21PM +0530, Deep Ganatra wrote:

> >You can use authentication for squid for web surfing, but that will not
> >block application which do not go through squid.
> >Personally, I would setup NIS/LDAP as centralized authentication and
> >push firewall rules based on login and logout events for the LDAP server.
> >
> Basically i m gonna install squid on the main server and i dont want 
> anyone to enter proxy address in the IE options or in any brower to 
> surf...so is it possible to use squid without entering proxy address in 
> all the machines ?

Why do you want to do that? I don't think there is any nice clean way
to allow users to continue browsing without being aware of the proxy.
Unless you have a really impelling policy/technical reason to do this,
don't worry about setting up some hack to manage it!  Centralised
LDAP-based authentication and the combination of the right tools at
the right place will go a long way in keeping headaches away over the
years!

Sameer.
-- 
Research Scholar, KReSIT, IIT Bombay
http://www.it.iitb.ac.in/~sameerds/

-- 
http://mm.ilug-bom.org.in/mailman/listinfo/linuxers

Reply via email to