redirect all http requests to a different squid proxy server
 

Hello,

I have three systems where I'm running apache web server on 192.168.0.26 and I have another system 192.168.0.25 running squid proxy server and I have 192.168.0.20 in which firewall/shorewall is running.
And a network of systems 192.168.0.X

All the users in this network are having the gateway as 192.168.0.20(firewall) and has the nameserver resolve to 192.168.0.25 where the dns and the mentioned squid proxy are running.

Now my problem is that all the users of the network are able to open the restricted sites by making the option No Proxy selected through the browsers.

So to make this also stop, Im thinking at the firewall system to redirect all the http requests made should be redirected to the squid proxy. Nothing but the firewall should only accept http requests coming from the
proxy only and not from any system.

Please I need some suggestion in doing this.

Thanks

Someone smarter than myself might be able to tell you how to do exactly what you're asking, but what you could do is block outgoing traffic on ports 80 (http) and 443 (https) when the originating ip address anything except 192.168.0.25/192.168.0.26

That would effectively prevent anyone from bypassing the proxy setting in their browser.