Hello , all

I have a LAN connected with a LINUX box to Internet that allow the LAN's users to connect only to 10-20 web servers on Internet ( by using iptable & netfilter ).
One of that web servers acts as both web server and free proxy server. And I want to block my users from accessing that free proxy server but allowing them to view that web.

My question is: how can I configure the squid or suidguard or other things on that LINUX box( this box is my LAN's gateway to Internet.)



Thanks

the acl section in squid.conf file should make your day.

The anonymizer you want to prevent access to being (probably) a virtual host on a server, if you wish to allow access to other virtual hosts on the same server you must use squid's name-based acl's, instead of ip filtering.

first you create the acl :

acl no_way dstdomain .proxify.com
(no_way can be any name you choose and proxify.com isjust an example)

then you create the rule (what to do with requests to domain proxify.com)

http_access deny no_way

the order in which acl rules are processed is (of course) important. Refer to comments in squid distribution config file.

One more tip : you may customize the messages sent by squid to the client browser... Try "Big Brother is watching you !" for a moment of fun ;-)