We solved this problem at a job many moons ago by simply restricting all tcp/80 traffic to use the Squid proxy. Which everyone then had to set in their browser (or via auto-proxy-pac type thing) to visit any basic site. And since most other apps will use the proxy settings of the browser/OS, netflix, etc., all ended up using it as well by default.
We didn't BLOCK anything. We just posted a list, daily, of the previous day's proxy report, showing "Top 10 Bandwidth Consumers, by Host", "Top 10 Bandwidth Destinations", and let people sort those things out on their own. On good normal days, the top 10 sites were things like regional visiting-nurse services, medical supply companies, etc. (we were a healthcare supply company). And nobody cared about the reports because the reports looked good. But you knew they were posted every day. And you knew that if you suddenly blew the bell curve on your internet consumption, it was going to show up, and people might suss out that since you had now cracked the top 10 for the first time, and so had Netflix, that there might be causality there. So they didn't do it. Well, nobody did it except for the VP who - on his first day - blew the bell curve by apparently having a chat-window open to a porn-site all. day. long. Because he didn't know/realize how the system worked. ;-) Cheers, D _______________________________________________ Tech mailing list Tech@lists.lopsa.org https://lists.lopsa.org/cgi-bin/mailman/listinfo/tech This list provided by the League of Professional System Administrators http://lopsa.org/
