[ILUG-BOM] External Proxy usage on squid.

[Nadeem M. Khan]

On Wed, Mar 18, 2009 at 4:27 PM, Sachin <sac1n at yahoo.com> wrote:
>
> Hi,
>
> We have a squid server running which looks into user
> access. Now there are users who would use a webproxy
> or a external proxy to bypass this restriction. Is there
> a way to stop them.
>
> One rule is to figure out all the proxy sites and address
> and feed them to blocked sites but that process doesn't look
> good and easy manageable. Any suggestions ?

Hi Sachin,

Use squid as a transparent proxy. Using iptables, redirect all
requests for port 80 to port 3128. On your firewall/router, block
access to the internet from all workstations except the squid box.

Regards,
NMK.