[squid-users] squid as tranparant proxy and gateway

2007-04-05 Thread Yuan Yudistira 

Hello,

I need some help regarding squid.

I have squid setup on suse on ppc64 (172.20.21.231)
(this machine has an public IP 202.137.6.98 )

My default gateway is on 172.20.21.1

I need to make all HTTP request from all employee to squid (transparant proxy)
so I don't have to setup proxy manually on every client browser.

In my case, if we dont set up proxy on user client browser (IE or FF),
then they can access all adult site, download exe.mp3 etc.
( we don't want this as this slow down our internet connection)

Even if we set the proxy in user browser, they can remove the proxy.
(some user understand this)


out IT staff is not very good on the  networking stuff.

I will be very happy if anyone can help this problems.


Thanks

YUAN

--
~
"Limitless undying love
which shines around me like a million suns
It calls me on and on across the universe"
Accross The Universe   - The Beatles -

Visit :
http://www.sabukhitam.com/

[squid-users] ACL By IP not working

2007-05-18 Thread Yuan Yudistira 

Hi

I have the following ACL on squidGuard.conf


# Destination lists
# Addresses are relative to the db directory
dest porn
{
   domainlist  blacklists/porn/domains
   urllist blacklists/porn/urls
}

dest music
{
   domainlist  blacklists/music/domains
   urllist blacklists/music/urls
}

dest movies
{
   domainlist  blacklists/movies/domains
   urllist blacklists/movies/urls
}

dest spyware
{
   domainlist  blacklists/spyware/domains
   urllist blacklists/spyware/urls
}

dest warez
{
   domainlist  blacklists/warez/domains
   urllist blacklists/warez/urls
}

dest redirector
{
   domainlist  blacklists/redirector/domains
   urllist blacklists/redirector/urls
}

dest adv
{
   domainlist  blacklists/adv/domains
   urllist blacklists/adv/urls
}

dest drugs
{
   domainlist  blacklists/drugs/domains
   urllist blacklists/drugs/urls
}

src ipWartawanHiburan {
ip  172.20.21.102 172.20.21.76
}

src IT {
ip  172.20.21.186
}

# Access Control
acl
{
# During Business hours
# Stop the embarassing stuff and speed up the connecti

ipWartawanHiburan {
 pass movies !porn music !spyware !warez !redirector !adv !drugs any
 }

 IT {
  pass movies porn!music spyware warez redirector !adv !drugs any
 }

   default {
pass !porn  !music !movies !spyware !warez !redirector
!adv !drugs all
redirect http://172.20.21.231/blokir/
   }
}

I want to set access to a certain IP
ipWartawanHiburan can access movies,

the above acl is not working.
Please help


Thanks

YUAN

--
~
"Limitless undying love
which shines around me like a million suns
It calls me on and on across the universe"
Accross The Universe   - The Beatles -

Visit :
http://www.sabukhitam.com/
==