Re: Squid proxy thoughts

[Helge Tore Høyland <helge.tore.hoyland@gmail.com>]

Thx for reply.

For us, due to function, i need to use Firefox or Chromium as 
browser(due to poor programming on several servers, not accepting 
iceweasel). Iceweasel has to be uninstalled to get firefox to work 
properly, sadly. So that is not an option for me.

Preferably i would like my proxy to work at transparant mode. That way 
you can force all clients trafic through the proxy, without users 
knowing it. That would fix the trouble the different browsers has on how 
to configure automatic proxy setup with wpad files. For that to work, 
the proxy needs to be on the gateway.

For my schools, this is a break or make issue. As of now, its way to 
mutch hassle to do exams. And they tend to resort to use standalone 
machines, with the extra hassle of administration that makes.

Helge Tore Høyland


Den 06.05.2015 12:00, Giorgio Pioda skreiv:
> Hi,
>
> I usually switch off squid during examinations and netgroup block.
>
> Iceweasel still operates through direct internet connection.
> Chromium is fully blocked.
>
> I admit that this is a "cheap" solution; a better one would be
> to discriminate the squid incoming request throug the netblock
> group, but I never tried to implement it
>
> Regards
>
> Giorgio
>
>
> On Wed, May 06, 2015 at 11:33:49AM +0200, Helge Tore Høyland wrote:
> > Hi.
> >
> > I have some questions to the use of proxy on the tjener. Atm
> > Skolelinux 7, the use of netgroups to block access to internet is
> > not working. The need to be able to lock sertain clients away from
> > normal internet access, and maybe still be able to access some
> > central exam autority site, is ugent.
> > I have tried to set up my firewall, pfSense, to do the job, but
> > since the automatic proxysetup in skolelinux is set to use the squid
> > install on tjener as proxy, i cant make it work. All trafic that my
> > pfSense sees is the trafic from tjener (10.0.2.2).
> > I have asked in the irc channel on this, and got the answeer to use
> > wpad-file to stear clients to my pfSense box as proxy rather than
> > tjener. Ive tried to set this up on tjener and on the ltsp
> > equivalent to no use. All clients are still locked to tjener as
> > proxy.
> >
> > I have 2 senarios/sugestions that is valid.
> >      1. Get in place a decent way to administrate the proxy setup,
> > blacklist, and so on, on tjener. (preferably through gosa)
> >      2. Remove the use/need of proxy on tjener and let a dedicated
> > firewall do the job.
> >
> > I would prefear the first alternative, but the second holds some
> > advantages too. The 2nd will ease the load on tjener quite a bit.
> > pfSense, for one, has a very nice way to do this, and can be
> > integradet to tjener's ldap for easier administration.
> >
> > Kindly Regards
> > Helge Tore Høyland
> >
> >
> > --
> > To UNSUBSCRIBE, email to debian-edu-REQUEST@lists.debian.org
> > with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> > Archive: [🔎] 5549DFFD.6010807@gmail.com">https://lists.debian.org/[🔎] 5549DFFD.6010807@gmail.com