Re: How to Stop bypassing Proxy server?

From: Andrew Keith (andrew_at_jukenworld.com)
Date: 05/29/04 

Date: Sun, 30 May 2004 02:06:28 +0800

i am using a similar setup on my network. what i did was this. (squid is
using port 3128).

1) created a bridge with 2 network cards.
2) configured the router to pass all traffic to this proxy
3) iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port
3128.
4) configured squid to do transparent proxy.

All the users dont even know they are behind the squid proxy.

Andrew

"ssp2000" <sspphp@indiatimes.com> wrote in message
news:62e8bd5a.0405302053.5890abe1@posting.google.com...
> Some of the users at my location are accessing the Internet by
> bypassing the in-house proxy server. They are just typing the upstream
> proxy server IP address and port number in browser and accessing the
> Internet. How can I prohibit such activities? My network is on
> 192.168.7.0 and IP address of upstream proxy server is 195.2.104.7
> (take these IP addresses as an example). I can access 195.2.104.0
> network from my location. I am using Squid Proxy server on Linux
> RH8.Can anyone suggests use of IPTABLES to achieve this?

Relevant Pages

  • Re: [SLE] Question: VNC
    ... You send email via port 25 to the mail server on the LAN, ... a PC infected with a mass mailing virus, the virus then can't use its ... internal or DMZ-hosted web proxy server. ... "We manage your network so you can manage your business." ...
    (SuSE)
  • PF connection pool + squid 3 oddity
    ... I have very odd problem with pf connection pooland squid 3. ... browser to use proxy (e.g. gateway port 3128), ... I will not attach squid.conf since I have changed just the allowed network ... pass in on $ext_if1 proto tcp from any to $ext_if1 port $ports_in ...
    (freebsd-questions)
  • Re: How to make good Squid(Proxy ) Server in FreeBSD 5.4 ?
    ... Can anybody give me idea related to configure the squid (proxy server). ... So please tell me how to make parent proxy as well. ... Your Squid Port and ICP port might be different. ...
    (freebsd-questions)
  • Re: Using a home T-1 line to evade company filtering
    ... > proxy server at home to accept proxy connections on that port, ... > network at a time when the admins have gone home for the night. ... Any network security admin will see this and put an ...
    (comp.security.firewalls)
  • Re: 0xC00D2EEE: Cannot find the proxy server
    ... > WHERE IS THE NETWORK TAB so I can reset the network proxy server? ... correct proxy name and port. ...
    (microsoft.public.windowsmedia.player)