Squid NCSA

depam · 03-15-2006, 10:55 PM

Hi Guys! I've successfuly installed Squid on one of my servers. I am using ncsa authentications to allow certain users to use the proxy. Now, my problem is that I do have website blocking. After the user was authenticated by squid, all the restricted sites is now accessible. How can I make a rule in such a way that even after the users have authenticated themselves, some websites are still restricted.

Another thing, how can I setup a rule forwarding a blocked wesite to our website?

gilead · 03-15-2006, 11:05 PM

It depends on the ordering of the rules. If I had a rule called blocksex blocking URLs and another rule called internet that did the authentication of users, I'd have it in my squid.conf file in the following order:

Code:

acl blocksex dstdom_regex -i sex
acl internet proxy_auth REQUIRED
http_access deny blocksex
http_access allow internet

P.S. Don't assume anything from the blocksex rule - I don't mind how much sex you browse

depam · 03-16-2006, 01:59 AM

Okay thanks..How about the forwarding feature? Is that possible? For example, if I visited www.yahoo.com, I will be then forwarded to www.google.com.

gilead · 03-16-2006, 06:20 AM

It's definitely possible. The Squid redirectors FAQ at http://www.squid-cache.org/Doc/FAQ/FAQ-15.html has some info on this. I've never had to do it so I won't pretend to know how reliable (or easy) it is...

depam · 03-16-2006, 07:05 AM

Okay thanks. I'll give it a try although I'm not good at scripts. I heard there is also a package named squidguard which can makes squid administration easier.

gilead · 03-16-2006, 01:02 PM

Yes there is - I don't know whether it's being actively maintained anymore since the site at http://www.squidguard.org/ hasn't been updated since 2001.