[squid-users] Content Filtering Solutions

[Mark Maxey]

I work in the security assessment field and currently utilize Websense for content monitoring. My 
license for websense will be up in a month and would like to replace it with an open source solution.


Are there any open source solutions that will allow me to use a spanned (mirrored) port on a switch 
to monitor traffic, specifically web traffic and match that traffic against a blacklist, such as 
urlblacklist.com's list. I just want to monitor the traffic and be able to provide a report based on 
what users within an organization are looking at by passively sniffic the traffic on the spanned port.


I know this isn't directly related to squid, but I would like to then recommend squid/dansguardian 
to be used for content filtering in some cases.


Any ideas?

[squid-users] removal problems

[Mark Maxey]

I've tried removing myself from this list, but I can't seem to be able 
to do it

please remove the emails mmaxey \at mastersoftech.com and markmaxey-dev 
at mastersoftech.com from the lists please
--
Mark Maxey
Information Systems Security Specialist - Masters of Tech
[EMAIL PROTECTED]
Phone: (859) - 948-5841
begin:vcard
fn:Mark Maxey
n:Maxey;Mark
org:Masters of Tech
adr:;;3550 Kenesaw Drive #21;Lexington;ky;40515;United States
email;internet:[EMAIL PROTECTED]
title:Information Systems Security Specialist
tel;work:859-948-5841
tel;home:859-948-5841
x-mozilla-html:FALSE
url:http://www.mastersoftech.com
version:2.1
end:vcard

[squid-users] squid and local servers

[Mark Maxey]

How exactly can I allow hosts to setup a particular host as being "local"

The squid server has 2 interfaces, one public (used to get web content) 
and one internal (192.168.1.9).  There is a site to site VPN and a host 
thats in a different range 10.60.111.0 that is connected to another 
location.

How can I get squid to be able to access the host in the 10.60.111.0 
range?  I can't get to the host using lynx either.  Is this a network 
problem or squid?

Mark Maxey

[squid-users] NTLM Auth Howto

[Mark Maxey]

does anyone know of a good howto to getting NTLM authentication working with
Squid + Samba (2 or 3 whichever is easiest) on Linux?

Thanks

Mark

[squid-users] Squid Setup

[Mark Maxey]

I'm in the process of implementing a squid proxy on Windows 2000 based
network on linux with authentication via the win2k domain controller.

Also, is there a squid administration tool that would allow me to block a
user by username in a simple manner?  Also, is there a way to "include" a
file in squid.conf?

Which reporting package would be optimal to show how much time and bandwidth
that a user is spending online by username.

How much server horsepower will I need to do the following :

Caching and Authentication over win2k domain for 250 client workstations (t1
total bandwidth)
Detailed Reporting showing time a user spends online throughout the day
Blacklisting of certain sites from a blacklist, ie porn, free email sites
Webmin or something similar for administration

Thanks

[squid-users] Blocking user access by username

[Mark Maxey]

Is it possible to block a user's access to the proxy based on username.
I'll be authenticating off of a win2k domain controller?

[squid-users] NT4 Domain Authentication with Squid

[Mark Maxey]

I have an existing NT4 domain and we're using MS Proxy.  I'd like to migrate
away from using MS Proxy as it chokes constantly.  Can a squid proxy
authenticate off of the nt4 domain and if so how?

Also, I'd like to be able to log what the users are doing online and be able
to generate reports.  Is there a software package that would allow me to do
this?

Mark