I organise that my users have to login to access internet
it works only If I configure The desktop internet network parameters to goes to the ip address of my SME server (e-smith V7).
It means that with this config all users defined with (pam) inside the server-manager have to login to access internet.

However, if the user'desktop is not configured to go to this proxy(the sme server), this user do not need any authentification to access internet.

What do I need to do to prevent internet access without a login first.



when i type this command---> config show squid
I receive the following answer:
squid=service
EnforceSafePorts=no
RequireAuth=pam
SafePorts=21,70,80,81,119,210,443,563,980,1024-65535
TCPPort=3128
TCPProxyPort=80:3128
TransparentPort=3128
access=private
status=disabled
[root@serv1 ~]#

Who is able to give me some advice
jaxd

by the sound of it, stop doing transparent proxying and block default route port 80 traffic leaving your network. you've not said anythign about your network topology andhow you are using transparent proxying at all.

thanks Chris,
my network is very small
one sme e-smith server to go to internet (dsl)
another ethernet card to my local lan via several hubs

I organise a physical connection in each room of my house!
the clients are most of the time laptop with XP as os.

I'm certainly not a linux expert, but I tried to keep it simple and secure

do you know a method to disable the transparent proxy
and also how to block the port 80

thanks in advance
jaxd

are you just asking for support for e-smith? can't help you with that i'm afraid... never heard of it.

thanks anyway
it is just a linux system!
I thought it was so generic!
regards
jaxd

I saw the following :

[root@server root]# db configuration setprop squid Transparent no
[root@server root]# signal-event remoteaccess-update

if it does not match my requirement may I reverse it like this


[root@server root]# db configuration setprop squid Transparent yes
[root@server root]# signal-event remoteaccess-update

thanks in advance for your expertise
jaxd

these look like bespoke commands i'd have no knowledge of, sorry, can't really help you with any specifics. all i can suggest is to turn off transparent proxying if you're not familiar with what it is. and if your firewall is also being run by this e-smith thing, then prevent outbound connectivity via whatever firewalls you are currently permitting the access.