Hi

as I configured shorewall and configured dansguardian url filtering server, but dansguardian is working only when i am enabling proxy settings in clients machine, so how do i make it work without bypassing proxy, please help with this

below is my shorewall rules file


#SECTION NEW
ACCEPT loc:172.16.6.30,172.16.7.30,172.16.2.39,172.16.50.1,17.16.1.10,172.16.2.243 $FW

REJECT loc net tcp 25
REJECT loc net tcp 3121
REJECT loc net tcp 3122
REJECT loc net tcp 3123
REJECT loc net tcp 3124
REJECT loc net tcp 3125
REJECT loc net tcp 3126
REJECT loc net tcp 3127
REJECT loc net tcp 3128
REJECT loc net tcp 3129
REJECT loc $FW tcp 80
REJECT loc $FW tcp 443


## FIREWALL RULES
DNS/ACCEPT $FW net
DNS/ACCEPT loc net

Ping/ACCEPT $FW net
Ping/ACCEPT $FW net
Ping/ACCEPT loc $FW
Ping/ACCEPT loc net

ACCEPT $FW net tcp 80
ACCEPT $FW net udp ntp

## TRANSPARENT PROXY RULE

ACCEPT loc $FW tcp 3128


and below is my etc/shorewall/started file
#iptables -t nat -A PREROUTING -i eth1 -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.16.40.1:3128
#iptables -t nat -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128


please give me some solution for this

hi i found how dansguardian works without proxy settings

in /etc/shorewall/started file


iptables -t nat -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8080

just add this line in ur /etc/shorewall/started file it will work without any proxy settings.

but it will not block https sites, so how do i block even https sites please help me with this.