LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 02-25-2008, 07:48 AM   #1
mrlinux2000
Member
 
Registered: Feb 2008
Posts: 144

Rep: Reputation: 15
block internet if no squid proxy


hi !

it is working now, i mean squid proxy , but clients desactivate proxy and i want to force them to use proxy before they can explore internet
thnak you
 
Old 02-25-2008, 08:01 AM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981
well that's what a firewall is for. If you can please describe your architecture, we may be ale to help.

Last edited by acid_kewpie; 02-25-2008 at 08:10 AM.
 
Old 02-25-2008, 08:08 AM   #3
Emerson
LQ Guru
 
Registered: Nov 2004
Location: Saint Amant, Acadiana
Distribution: Gentoo ~arch
Posts: 6,317

Rep: Reputation: Disabled
I've seen networks where NAT is simply turned off, leaving no way but proxy to get out.
 
Old 02-25-2008, 08:30 AM   #4
mrlinux2000
Member
 
Registered: Feb 2008
Posts: 144

Original Poster
Rep: Reputation: 15
i have linux server and local area network 192.168.1/24 and i configure a proxy which is working if i go to the explorer-internet options-connections-proxy 192.168.1.11 port 8080
it works, but clients delete proxy after i did that and they can go without proxy ...
now i want to obligate that
 
Old 02-25-2008, 08:30 AM   #5
mrlinux2000
Member
 
Registered: Feb 2008
Posts: 144

Original Poster
Rep: Reputation: 15
i mean to get internet you have to pass through the proxy first not optionally
 
Old 02-25-2008, 09:00 AM   #6
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981
no, i meant what phsycial architecture do you have? what form does your internet connectivity take? what device is terminating it etc..?
 
Old 02-25-2008, 09:43 AM   #7
mrlinux2000
Member
 
Registered: Feb 2008
Posts: 144

Original Poster
Rep: Reputation: 15
ok,
am using nat one card for internet and other for local , and i have router adsl
 
Old 02-25-2008, 11:03 AM   #8
farslayer
LQ Guru
 
Registered: Oct 2005
Location: Northeast Ohio
Distribution: linuxdebian
Posts: 7,247
Blog Entries: 5

Rep: Reputation: 191Reputation: 191
So only allow the Proxy machine outbound access to destinations of port 80 and 443..
 
Old 02-26-2008, 04:42 AM   #9
mrlinux2000
Member
 
Registered: Feb 2008
Posts: 144

Original Poster
Rep: Reputation: 15
that is not what am asking for
 
Old 02-26-2008, 05:19 AM   #10
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981
no, that *IS* what you're asking for, he means you should block access to any other system on those ports. quite how you do it with the minimal information you have given us is a different question. why is this box routing in the first place? should you not just disable routing on it? are you using some firewall gui on this box already? just add port 80 and 443 to the block list there.
 
Old 02-26-2008, 05:52 AM   #11
mrlinux2000
Member
 
Registered: Feb 2008
Posts: 144

Original Poster
Rep: Reputation: 15
thank you all

as i mentioned i have squid proxy working well, but it work for the local post only if i set the proxy ip for them and port(they can disable proxy after i change it), and that is not what i dont want

simply i want that to be automatically
 
Old 02-26-2008, 05:58 AM   #12
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981
yes, you keep saying that and keep not giving us useful information. what are you doing for a firewall? is this box also the router etc..?
 
Old 02-26-2008, 07:03 AM   #13
mrlinux2000
Member
 
Registered: Feb 2008
Posts: 144

Original Poster
Rep: Reputation: 15
ok, am using iptables , i think i have to add rules to forward all http requests (coming to port 80) to the Squid server port 3128 !!!
 
Old 02-26-2008, 07:18 AM   #14
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981Reputation: 1981
i would advise against an automatic proxy myself, it's much nicer to have them correctly using it directly, as you then have more clarity and visibility of what's going on. if you do want a transparent proxy, then there are many many docs online about the iptables and squid modifications to do this.

http://www.faqs.org/docs/Linux-mini/...rentProxy.html

as above, better to just block it normally though.

Last edited by acid_kewpie; 02-26-2008 at 07:23 AM.
 
Old 02-26-2008, 08:06 AM   #15
mrlinux2000
Member
 
Registered: Feb 2008
Posts: 144

Original Poster
Rep: Reputation: 15
thank you sooooooooooooooooooooooooooooo much
i appreciate your help
thank you
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Squid proxy: block Flash adverts hamish Linux - Software 4 02-13-2012 07:42 AM
squid proxy server configuration & distribution of internet without proxy gaurav_gupta082 Linux From Scratch 2 07-31-2010 11:25 AM
using squidGuard to block internet or external anonymous proxy ocavid Linux - Security 7 03-04-2008 06:35 AM
SQUID:How can I block my LAN clients accessing Internet mwj Linux - Networking 1 10-27-2003 04:01 AM
Squid proxy/cache on a dail-up internet connection manaskb Linux - Networking 1 01-14-2003 12:55 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 05:32 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration