Hi guys

Im new at opensuse and also in squid,

i want to set up a proxy server using opensuse install in vmware (first but i plan to setup it in desktop when i have money to buy new pc).

ok, this si the setup internet --> proxy server --> client.

i already setup squid and it works, but i need to set the proxy setting per user. But we all know that now a days user can ask a question to google on how to remove proxy bla bla bla.


i want to create a file list of ip's then list of badwebsites,
and setup a transparent squid server. i play with squid config and also create a ip list and blacklist but no luck.



note : i already block ip (my ip of opensuse and the ip of pc where vmware installed)

My suggestion would be use Squidguard from http://squidguard.org which works well with Squid. You can have user based policy. For user based use htpasswd. And webmin for admin management.

Thanks sir, )
is that will work even im using vmware ? i try the squid proxy, and its work but only on the pc where i install vmware and on the opensuse installed in vmware.

but btw thanks so much appreciated

If you mean whether this will work on vmware, then yes. Otherwise, please elaborate more.

do you have any tuts ?
for squidguard and squid, i already try all in the net but no luck

I agree with using squidGuard. You will also want to look at how you will deploy Squid itself..

You can deploy in the traditional mode where the client must be configured to use the proxy server. The upside to this is that more things will work, including proxying SSL sites. The downside is that you will have to configure every machine when it uses your network and turn off that config if you go elsewhere. Additionally, you will need to write firewall rules for the perimeter router / firewall to ONLY allow the Squid server to have Internet access.

You can deploy in transparent mode where the client doesn't even know that Squid is there. The problem here is things like proxy for SSL sites won't work properly in many (all?) cases. Additionally, many streaming sites don't support the use of a proxy and content will simply fail (Amazon is an example of this).

With more and more sites moving to SSL protection, transparent mode is getting more and more difficult to use even though it generally offers the best protection for content filtering (via squidGuard) with the least effort (no configuration changes to clients).