i have a suse 9.3 box running squid acting as the proxy server and gateway for my home network. i also have the susefirewall running and ipmasquerading/forwarding enabled. Is there a way to force a group of IPs to use the proxy server using the acl rules in squid.conf?

Basically I want a range of IPs, lets say 192.168.1.10 - 192.168.1.20 to be forced to use the squid proxy. If their web browsers arent setup to use the proxy server then I dont want them to view the web. This way the users cant go into their browser settings, disable the proxy settings, then view web sites that i dont want them to view.

All other IPs should be able to view the web without being forced to go through the proxy server. can this be done? if so how do i configure squid to set this up? Thanks.

hmm i found this: http://www.linuxhomenetworking.com/linux-adv/squid.htm im gonna give that a try. i think i can figure out how to force the squid connection using the susefirewall.

yeah, it's very simple... let me know if you have any questions... good luck...

in case anyone else ever tries to do this with a newer version of SuSe, this site tells you how to configure your SuSeFirewall to use the transparent proxy:
http://www.karakas-online.de/myLinux...-proxying.html
The only difference with SuSe 9.3 is instead of using:
FW_REDIRECT_TCP="192.168.0.0/24,0/0,tcp,80,3128"
I used:
FW_REDIRECT="192.168.0.0/24,0/0,tcp,80,3128"
I restarted my squid service and firewall and it worked great.