Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 06 Jul 2007 16:23:56 -0400
From:      Steve Bertrand <iaccounts@ibctech.ca>
To:        RW <fbsd06@mlists.homeunix.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: parental control with squid and dansguardian
Message-ID:  <468EA4DC.1070502@ibctech.ca>
In-Reply-To: <20070706203359.411e7416@gumby.homeunix.com.>
References:  <28511e606938ca3af6624a90fa5798e9@szalbot.homedns.org> <20070706203359.411e7416@gumby.homeunix.com.>

next in thread | previous in thread | raw e-mail | index | archive | help
RW wrote:
> On Fri, 6 Jul 2007 13:20:07 +0200
> Zbigniew Szalbot <zbigniew@szalbot.homedns.org> wrote:
> 
>> I do not yet have FreeBSD functioning as a real gateway as I will be
>> able to do it at a later stage. However, there is one thing that
>> leaves me wondering. In order to use the content filtering as
>> provided by Dansguardian, I need to configure the browser to look for
>> proxy on port 8080. Now, if someone just changes the port in their
>> browser to 3128 (squid proxy port), then all content filtering will
>> be bypassed. 
>>
> 
> If this box is not the gateway, there is no point in doing anything
> about this because they can simply turn-off proxying and go direct to
> the internet. 

Not if the box is an inline bridge...

Allow minimal Internet use, ftp, ssh, 587, 110 etc, then fwd 80, 443 to
the internal proxy box and voila.

Steve



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?468EA4DC.1070502>