CentOS - Mar 2010 - Define HTTP proxy system-wide (Squid and Squidguard) ?

Hi,

I'm currently configuring Squid and Squidguard for filtering web access 
in a public computer room. So far, everything works fine.

I know how to configure Firefox to use a proxy, but there's no way to 
protect that configuration, e. g. a more knowledgeable user might 
circumvent this configuration. Is there some way to configure an HTTP 
proxy system-wide?

Cheers from the sunny South of France,

Niki

From: Niki Kovacs <contact at kikinovak.net>
> I'm currently configuring Squid and Squidguard for filtering web 
> access in a public computer room. So far, everything works fine.
> I know how to configure Firefox to use a proxy, but there's no way to 
> protect that configuration, e. g. a more knowledgeable user might 
> circumvent this configuration. Is there some way to configure an HTTP 
> proxy system-wide?
I think you might have to go this way:
http://wiki.squid-cache.org/ConfigExamples/Intercept/IptablesPolicyRoute

JD

On Wed, 2010-03-31 at 12:23 +0200, Niki Kovacs wrote:
> Hi,
> 
> I'm currently configuring Squid and Squidguard for filtering web access
> in a public computer room. So far, everything works fine.
> 
> I know how to configure Firefox to use a proxy, but there's no way to 
> protect that configuration, e. g. a more knowledgeable user might 
> circumvent this configuration. Is there some way to configure an HTTP 
> proxy system-wide?
> 
> Cheers from the sunny South of France,
> 
> Niki
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos

On the router level, you could block all the traffic and allow only the
threads initiated by proxy. Thus you make sure that no 'clever' user can
generate outbound traffic.


HTH


Calin

Key fingerprint = 37B8 0DA5 9B2A 8554 FB2B 4145 5DC1 15DD A3EF E857

================================================Children are natural mimics who
act like their parents despite every
effort to teach them good manners.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.centos.org/pipermail/centos/attachments/20100331/49aa3ab2/attachment-0002.html>