* This is the VOP Radius mailing list * Kais and Todd, Maybe what you really need is transparent proxying. Then you'll be able to capture all traffic from port 80 and redirect it through your proxy server. It saves us about 30% of web bandwidth (using a 20-gigabyte cache for 300 dial-up and 4,000 users, aprox) and allow us to do whatever kind of filtering we need.
The "problem" is that it's not based on RADIUS profiles at all, which means that you'll have only the IP address to separate the user who will be proxied from the one that won't. So, two choices here (and I'd be glad to help with either one): setup a RADIUS filter to block port 80, thus obliging your "filtered users" to configure a proxy in their browsers; setup a transparent proxy system, where everyone in the defined IP range will be transparent proxied. I don't know a lot of specifics about it but if you use any of the equipment I've worked I can guide you through. If your gateway is either a Linux box, a Cisco or an Intel Layer 3 switch like the 550T and your proxy server is Squid, I can help with the transparent proxy. If your NAS is a Portmaster, I can help with the RADIUS filter. Let me know. -- Luiz Lima Image Link Internet http://www.imagelink.com.br ** To leave this list, send an email to [EMAIL PROTECTED] and put the word "LEAVE" in the BODY of the email.
